* make metadata endpoint configurable
* allow specification of a certificate file for checking the signature