*.pem *.csr *.key result result-* gcroots/ ca configuration.nix system .direnv