Ok, but:
Why is it a bad idea to have a shared client certificate between multiple client applications on the same host? Why is apt-get just not "respecting" the groups of the _apt user?
Ok, but:
Why is it a bad idea to have a shared client certificate between multiple client applications on the same host?
Why is apt-get just not "respecting" the groups of the _apt user?