security: In getCertificate doc comment, clarify optional parameter getCertificate.