or more likely automated brute forcing of any new certificates before including?