use tee instead of mv to force proper certificate permissions
Merge pull request #3168 from wayneeseguin/bugfix/gh_3168_fix_certificates_permissions

fix osx certificate permissions