use offlineimap auto-mailboxes
use cert file not fingerprint
updates from upstream