don't include cert.pem in the obsoletedfiles list.
wait 10 minutes before retrying on soft failures to avoid us getting DoSed
if something is wrong there (like someone's system can't validate the
cert)