Full review (do not merge)

Not sure what you mean here.

Should we fail out when no certs are set?