I'm not sure, that's what the shib documentation suggested, I'll look into what apt does.