The cert couldn't obviously couldn't be static in this case (otherwise it would be trivial to get the private key). Creating a cert during "install" probably a

The cert couldn't obviously couldn't be static in this case (otherwise it would be trivial to get the private key). Creating a cert during "install" probably adds a good bit of complexity (especially if the map has multiple env targets)