migrate the SSL certificates path for non-primary certs to a new layout using a new migration script
when adding/removing mail addresses also update nginx's config