config/deploy/certs cleanup