Does using certs still suck though? I get that it's a hard problem, but cert revocation and distribution, that's really hard even for OSes.