Only load private key if we loaded a non-default certificate