while we're at it, let's un-hardcode the cert path