When a manager is bootstrapped with a signed certificate provided, the PKCS12 file is not created (as this is created during generate_ca_cert in the utils). (this will probably apply but in a different way in 4.3- needs confirming)
As a result of the PKCS12 file not being created, riemann workflow executions (e.g. auto-heal) silently fail when they try to access that file, causing the heal to fail to trigger without any indication to the user of what is happening.
This means that either the way the riemann certs are checked needs changing or the PKCS12 file needs to be generated.
(tagged for 4.3 because it almost certainly will still affect that)