8c9d2745e2
also convert almost all cmd execs for certificates to properly escape arguments
also convert almost all cmd execs for certificates to properly escape arguments