Fix cert update channel deadlock