- avoid some caching for non-blob urls
- emit our own certificates - configurable via ENVs - generates config dinamically