more direct unlimited smt_timeout;
update of certificates: generated command-line options are part of input / digest;