Replaced 'sshcerts' role with 'pki' role