don't try to load cert/key when the "-nocert" option is set