make the system SSL certificate a symlink so we never have to replace a certificate file, and flatten the directory structure of user-installed certificates