SCEP certificates without user affinity