[backend] don't commit certs when the signkey is "1"