noted in https://github.com/OpenUnison/openunison-k8s/issues/109 that we document how to set openunison's certs, but not the API server's.