:extdir /etc/ssl		root:root 0755
:extdir /etc/ssl/certs		root:root 0755
:extdir /etc/ssl/private	root:ssl-cert 0710

:default_mode 775

mkcert.sh		/etc/ssl/	# self signed certs
check-certs		/etc/ssl/	# util
