Michal, my main question is why we need to call cert-script from rpm-script at all. We didn't do this in the past. Why now? Is it to fix this bug? Have I missed something here?