not necessarily pconf
but we CAN refresh SCTs, albeit with an ugly system() retcode