do not fail if certs dir already exists, duh