(safe) directory recursion when looking for CA certificates