Turns out we need to store initial state server cert in state so HA works