added user warning, neater cert install and improved flow for install from manifest