PASS Ensuring certificates and cnames are ephemerals