add a contingency for machines that are pre-registered without a certname