ca-sign.gup:
  **/*-cert.pub
ca-resign-dir.gup:
  *