better entrypoint and symbolic links for certs