Handle certificate dir under GnuTLS, if recent enough