key needs to be owned by apache for RHEL family