There must be a worthwhile reason - the added complexity of certs is non-trivial [1].  Perhaps certs are deemed less easily transferable compared to API keys (simple strings)?<p>[1] <a href="https:&#x2F;&#x2F;developer.apple.com&#x2F;library&#x2F;ios&#x2F;documentation&#x2F;IDEs&#x2F;Conceptual&#x2F;AppDistributionGuide&#x2F;AddingCapabilities&#x2F;AddingCapabilities.html#&#x2F;&#x2F;apple_ref&#x2F;doc&#x2F;uid&#x2F;TP40012582-CH26-SW11" rel="nofollow">https:&#x2F;&#x2F;developer.apple.com&#x2F;library&#x2F;ios&#x2F;documentation&#x2F;IDEs&#x2F;C...</a>