the command will now not generate bogus certs and keys