openssl: use atomic_write to install cert file