Stanford certs plays git_ssh update

Go from copy to template so certs_home gets substituted in correctly