ca-sign.gup: **/*-cert.pub ca-resign-dir.gup: *