keep hostname in pem filename, add symlink