netauth: default to keys/tls.pem for certificate from config

netauth/__init__.py

@@ -128,7 +128,7 @@ def with_config(cls, path: Path, **kwargs):
         tls = cfg.get("tls", {})
         token = cfg.get("token", {})
 
-        cert = Path(tls.get("certificate"))
+        cert = Path(tls.get("certificate", "keys/tls.pem"))
         if not cert.is_absolute():
             cert = (path.parent / cert).absolute()