cleanup, add uniquify_certs to stamp jti on certs