not writing /opt/conjur/embedded/ssl/cert.pem, it may not exist anyway; install c_rehash in ssl_certificate recipe