* replaced os.path with pathlib.Path

* fixed some type hinting; added FIXME for critical vulnerability

* added string and path support for certificate paths because path only broke the API. BUT we should stop using strings for paths in the future..

---------

Co-authored-by: ratara <noreply>