When importing a .ovpn file that includes inline .ca .pem .tls etc. files, the KDE Network Manager creates new files in ~/.local/share/networkmanagement/certificates ...