Isn't this in Epsilon somewhere already?  I guess we should move `certcreate` here, rather than there, since vertex is a thing that might need certs a lot...