ensure certs dir get created