fixes for generating proxy certs when using unencrypted keys