certificate_repository_path is now optional (for usage with slapproxy)