fixup missing data bag line and add defaults to openssl cert generation