If you want to use ELEVATE or ALLOW AND LOG rules but the underlying certificate keeps changing, here's a technique that will help you out. CAREFULLY follow the directions to get this work as expected.