Demo: cert-manager (part II)