fscrypt breaks NetworkManager with certificates

[Martin K.]

When using an fscrypt-encrypted homedir, NetworkManager is unable to auto-connect to an EAP-TLS network when the certificates are stored in the encrypted directory. It can however connect without problem when the certificates are stored outside of the encrypted directory. gnome-control-center does not complain, nm-connection-editor does however complain that it cannot access the files and does not allow saving the connection. My guess is that NetworkManager tries to access the files as root, which is not allowed by fscrypt.

[Martin K. (martin9959)]

https://github.com/google/fscrypt/issues/111#issuecomment-444352798