Certificates cannot be stored

I have a personal client certificate, that I want to import in chrome.
But with the default access settings, the certificate is lost after chrome restart.
I'm not sure what exactly chrome needs, but allow chrome to filesystem=home solves the problem.

Start by reproducing the certificate import with the default access settings, then compare it with filesystem=home enabled. Investigate where Chrome stores imported client certificates and which permission is required. Done means an imported personal certificate survives a Chrome restart without granting unnecessarily broad home-directory access.

Written by the indexing model from the issue text.