automerge: 05cff40 * commit '05cff4047d1c1d0552ce52a6af0151c6b1cc8e4f': Check upgrade certs before permissions.