add a note about self-signed certs