8.7.x fails to startup: open /usr/share/apm-server/certs/ca/ca.crt: permission denied reading

**APM Server version** (`apm-server version`): 8.7.x

**Description of the problem including expected versus actual behavior**:

We have the following docker-compose file that we used locally for apm: https://github.com/exceptionless/Exceptionless/blob/main/docker/docker-compose.apm.yml This has been working for all version of 8.x up until 8.7.0. When we start with 8.7.0 we get the following error:

**Steps to reproduce**:

Please include a *minimal* but *complete* recreation of the problem,
including server configuration, agent(s) used, etc. The easier you make it
for us to reproduce it, the more likely that somebody will take the time to
look at it.

1. Copy https://github.com/exceptionless/Exceptionless/blob/main/docker/docker-compose.apm.yml locally
2. docker compose up

**Provide logs (if relevant)**:

```
apm-1 | {"log.level":"error","@timestamp":"2023-05-18T16:19:42.327Z","log.logger":"tls","log.origin":{"file.name":"tlscommon/tls.go","file.line":161},"message":"Failed reading CA certificate: open /usr/share/apm-server/certs/ca/ca.crt: permission denied","service.name":"apm-server","ecs.version":"1.6.0"}
apm-1 | {"log.level":"info","@timestamp":"2023-05-18T16:19:42.328Z","log.logger":"beater","log.origin":{"file.name":"beater/beater.go","file.line":159},"message":"stopping apm-server... waiting maximum of 30s for queues to drain","service.name":"apm-server","ecs.version":"1.6.0"}
apm-1 | {"log.level":"error","@timestamp":"2023-05-18T16:19:42.328Z","log.logger":"tls","log.origin":{"file.name":"tlscommon/tls.go","file.line":161},"message":"Failed reading CA certificate: open /usr/share/apm-server/certs/ca/ca.crt: permission denied","service.name":"apm-server","ecs.version":"1.6.0"}
apm-1 | {"log.level":"info","@timestamp":"2023-05-18T16:19:42.328Z","log.origin":{"file.name":"beatcmd/beat.go","file.line":386},"message":"apm-server stopped.","service.name":"apm-server","ecs.version":"1.6.0"}
apm-1 | Error: 1 error: open /usr/share/apm-server/certs/ca/ca.crt: permission denied reading
apm-1 | Usage:
apm-1 | apm-server [flags]
apm-1 | apm-server [command]
apm-1 |
```