Don't include archived certificates for `/latest`
If there's no published certificate for `/latest`, send a 404
Park `POST /users/:user` for now, as it causes problems