wrap auth in bootstrap script
set permissions on .arcrc so install-certificate doesn't complain