Allow openssl to read /mnt/state/etc/keystone/ssl/private