nss_dir
save the quotes
certs must be prepared before service start