chmod u+rwx ./destdir/private/foo-keycert.pem \
	&& keyId= cnfFilePath=./ssl_mgmt.conf ../ssl_mgmt renew foo \
	&& getfacl ./destdir/private/foo-keycert.pem | grep "user::rwx"