Some people may forbid writing to /usr, for varying data it's common to use /var. Certificates and keys are also usually stored in /etc (few examples /etc/chef, /etc/pki, /var/lib/puppet/ssl). I know ssh keys are specific because permissions of file and containing folder must be set quite strict, but still this is feasible under /etc or /var