make sure new cert and key is only added once