fix: correct authorization checking for support accessing certificates