Certifications of cloud provider services welcome, but users cannot rely on them