Scrub generated certs from nginx in server base to prevent reconfigure issues in ephemerals