We should not have write permissions to CertPath, only to PrivatePath