refs #7719 - allow websockify to read certs

This is definitely needed for Katello because our certs are in `/etc/pki`.