you have to point to the certs in /etc/netclient