no self configure; dont support aws certs