Hack for #251

talloc context for certs / vps is NULL, not "ssn".
Otherwise, when "ssn" goes away, so do the certs / vps.

This isn't the definitive fix, but it's a start