full path to the certificate file; strict permissions for the credentials file