Update SSL Documentation
OK, after having a chat with @twk3 it seems the confusion in !2755 (merged) was due to documentation.
We reference Let's Encrypt and SSL twice:
The first is what I'm thinking of - when a private ssl cert has to be used to prove that the host server is who it claims to be.
The trusted_cert feature is actually used to reach out to other machines when pulling from external sources and verify that they are who they claim to be...thus it's totally normal for these certs to be 0644.
cc @rmarshall
Edited by Robert Marshall