allow apache to read PLC_MA_SA_SSL_KEY so it can make user certs