added --override-ntru to automated cert renewal process

fixed a minor bug resulting from change to conditional