Refactor only/except processing on client-side
Make certificate creation silent in run.sh
Various fixes to only/except