move certificates vs. add settings