tagged greppable TODO for verifying certs