SELinux prevents Certmonger to write to /etc/custodia. Let's follow Fedora's packaging guidelines
https://fedoraproject.org/wiki/PackagingDrafts/Certificates
- /etc/pki/$appname/,
- /etc/pki/$appname/public/,
- /etc/pki/$appname/private/, and
- /etc/pki/$appname/cacerts/