fixes #7729 - allow websockify to read certs

This is definitely needed for Katello because our certs are in `/etc/pki`.