ignore .lock files
certificate v0.4.0

* Add `nginx_cert` knob for chained certificates