[openFATE 315592] [RN] retire /etc/ssl/certs as r/w for admins