Don't leak cert in case of failure