Refactor apps load_certs/load_crls to work incrementally