In what way are self-signed certs garbage? They're essentially the same as ssh certs.