Clarify user cert renewal instructions