cfgupgrade: Use new bootstrap function for certs and keys