encrypted assertion certificate does not propagate if created on secondary node [RTFACT-20016]