SELinux config to allow following symlinks to certificates