Why manual certificate management is running out of time