fix: certificates permissions