renaming discern_branch

also adding certs and discern to provision