change ssl_certs into local role files