cert and key pulled from config, not hardcoded locations