make data mover certificates configurable