certmanager: Fix global access