Clarify use of move-instance with self-signed certificates