add enable-certservice, ease of use