guess pka and cert aren't always available

add auto-key-locate

(0) -300 -100 -30 -10 -2 +2 +10 +30 +100 +300 tip

mercurial