zshrc: difr, import-certs