crt and key file's owner should be root