Looks like Ash went after just the API keys piece. I know he's been working on an Ansible playbook to do some of the annoying parts of the certificate :dancer:.

@pquerna - Care to add or link a post on the *right way to do it* :tm:?