hmm I think this might be weak, I would add a TODO for improving this checking if we have valid config/certs...
or maybe with a sucess-config-conf flag this is not needed. what do you think?