certauth: improve const correctness