use pkg_resources for grabbing certs