update README to generate long-lived certs