need to accept S3 certs