similar fix as https://github.com/cloudflare/cfssl/pull/996/files#diff-bce1e9ac488e338e3aa3534151936e9f6e852a224ce9c9cb5e3f55529ca2fb76 is likely needed. Even better would be if they were ephemeral - generated during the tests.