summary job now uses robot certificate for segment queries, etc.