prepare for /etc/ssl/certs becoming a symlink