Is it necessary to copy the files to /etc/? It seems to me (from looking at the code) that libvirtd.conf already contains paths to the cert/key files. IIUC, libvirtd isn't reading the files in /etc/; it's reading them directly from the nix store, because that's what the config file tells it to.