  /etc/pki/trust/blacklist/ r,
  /usr/share/pki/trust/ r,
  /usr/share/pki/trust/anchors/ r,
  /usr/share/pki/trust/anchors/* r,
  /usr/share/pki/trust/blacklist/ r,
  /usr/share/pki/trust/blacklist/* r,
  /usr/share/pki/trust/*.p11-kit r,
