Postgres cert provisioning