when certifying secondary certs and the user has not confirmed their ownership of the given computer, certify with a short validity period