only require certificate files for controllers (bnc#851514)

Backport from roxy branch