This will allow auto update of this cert. Until now the argument was the ability to quickly reimage a new machine if we need to. So having the cert committed separately would have helped. But with letsencrypt we are able to quickly generate certs and so this is no longer relevant.