Use stunnel in a container with a mounted directory for certificates