some tweaks with permissions and such for the cert thats brought over...