CONFIG_PROTECT_MASK="/etc/ca-certificates.conf"