pki-validation=drwxr-xr-x