Always save certificates, even if not using overlay (fixes #230)