dunno why buildkitchen was added ...
retrieve-cert-chain: don't suppress stderr