Correctly handle options.certificates setting