domtool-addcert handles inability to set an ACL entry