Add "disabled by --link" note to certificate arg