caddy should take care of the certs