mention the issue with self-signed certs