Certs need to be owned by stunnel for HUP