only require certificate files for controllers (bnc#851514)