rename us to _; rename PROMOTED to AUTHENTICATED
static variable instead of function for certificates; other tweaks
ignore errors from connection for now