Add "in pfx" format - there are a lot of different cert formats, would help to make sure they know we only handle pfx.