Fetch certs in bootstrap_context.rb, not in templates to avoid copypasta.