This can fail if ent_cert_dir doesn't exist.

Not sure if that's worth handling, but alas.