/etc/crypto-policies/local.d/nss-p11-kit.config