used to make API calls. We use our alternate CA though (valid only in Utah) since the key is unencrypted.