Umbrel might bloat it with the cert data, which isn’t used - making it harder to scan