/etc/one/auth/certificates/ is in opennebula 3.2.1-2.
This file is owned by root:root, with mode 0o755.