Redo the protection for reserved openchange certificates