Use su and cert files for more reliable setup completion detection.