cert and key file paths now read from config