r7049: auto-create the private/tls/ directory on install