Fix some permissions, reword certificate wording