AppArmor
AppArmor allow application to read files in folder
/etc/apparmor.d/local/usr.lib.ipsec.charon:
#include <abstractions/ssl_keys>
/etc/apparmor.d/local/usr.sbin.swanctl:
/etc/letsencrypt/** r,
/etc/apparmor.d/local/usr.lib.ipsec.charon:#include <abstractions/ssl_keys>
/etc/apparmor.d/local/usr.sbin.swanctl:/etc/letsencrypt/** r,