show the SSL certificate's fingerprint during setup so the user can sort of pin it
typo in updating DKIM, dont regenerate the DKIM private key each time setup is run