REGEN: test certs
UPGRADE: esp pak with user/role commands