add doc for certfile/keyfile