* Add return codes to setup_pwdcert function, so that caller can know