/etc/one/auth/certificates/ is in opennebula 4.12.3+dfsg-3.1build1.
This file is owned by root:root, with mode 0o755.