mount the certificates from outside the FS