README: handling encrypted certificates.