Allow client certs to be read by apache

Although oo-mco ping will succeed, application creation will fail because apache cannot read the certs. Moving them to an apache readable location works around this issue. 
I now see this is an existing pattern so it may be better to stay consistent.