always check the mtime of the system bundle and additionally the user specific certificate bundle if a user is given
