picasso ssl certs now in ops repo