Also create decryption certs if there is no config file.