if you're not shipping with TLS you need to make sure daemons put the directory back in place on boot after any update

Thanks a lot for your quick response. By daemons, would you be talking about some

launchd

script that auto runs on boot?