// In Istio 1.22 - we return nil here - the old code in s.initDNSCerts used to have
		// an 'else' to handle the unknown providers by not initializing the TLS certs but
		// still seting the root from /etc/certs/root-cert.pem for distribution in the
		// namespace controller.
		// The new behavior appears safer - IMO we may also do a fatal unless provider is