Tackling cert bundling with install-time symlink maps?