chmod u+rwx ./destdir/private/foo-keycert.pem \
&& keyId= cnfFilePath=./ssl_mgmt.conf ../ssl_mgmt renew foo \
&& getfacl ./destdir/private/foo-keycert.pem | grep "user::rwx"