use cert file too
add members() method to group
implement some missing steps and pepification