Also separate directory and file permissions so the certificate files don't end up with the executable bit. Fixes #81335