don't mutate method args in install_cert