update provision certs and keys