I feel it'd be confusing to use kasmvnc group to provide access to the TSL certificate. Groups like that control whether you can run software, e.g. "docker" group. Using "-cert" clearly shows it's just for certificate access. Not unlide ssl-cert group in Debian.