avoiding an extra cert is certainly ideal. I can see it being a bear because folks have specifically been tripped up by secure transport in the past