bin/setup: The `cert' directory doesn't need to be group-writable.