Note that access to certificate-directory and ca-directory should be limited