don't make app depend on certs