but then, maybe the whole API is now simpler with ``certificate`` in place..