add step re: pulling down the SSL certs