add swap for chef-validator.pem