root/public: links for certkeeper