don't rewrite certs