non-standard-file-perm etc/default/cacerts 0600 != 0644
