'get-certs' permissions too open (#745)
'get-certs' permissions too open (#745)

Fixes https://github.com/StackExchange/dnscontrol/issues/728
StackExchange/dnscontrol,StackExchange/dnscontrol,StackExchange/dnscontrol