vcl session: switch to generic cert key apis