update simplesaml recipe to be able to get cert files from s3