use a subdir to put the b2d certs into so we're less likely to annoy advanced users