[p_l]

In practice, for production, it's best to leave it out to separate component, especially if you might end up having to run with customer-supplied certs