Move handleCertificateUpdate to Auth module