always make config for jwt cert