Huh, I wouldn't have thought of those certs as any less site-wide than the hostname of the node they're used on, which *is* set in the XML config. If it's really one pipeline config per project, shouldn't the globus node IP/hostname be a per-project setting?

Thanks,
Brian