make cert use host rather than requiring service_id
notes about lack of security for elastic search