Allow client certs to be read by apache

Although oo-mco ping will succeed, application creation will fail because apache cannot read the certs. Moving them to an apache readable location works around this issue. 
Agreed, lets stay consistent for now.

I have several blog posts queued up to read regarding params pattern and think we should definitely revisit properly implementing it soon.