Can the certificate be a config secret and mounted as a volume or something?