differentiate logstash-cert service due to buckets (but we use symbolic links since the actual service unit is a stub and configuration happens in secrets