Set certs permission only one time before starting services