v0.24.13

docs/ACME_PROVIDERS.md

@@ -11,6 +11,10 @@ ancestor even though it can host a Web Server document root. See
 [Installation: external paths](INSTALL.md#linux-debrpm-read-only-access-to-external-paths)
 for scoped ACLs and Certbot renewal handling.
 
+### Certificate file permission command preview (0.34.13)
+
+The permissions explanation now appears next to generated read/traversal ACL commands, rather than alongside the path inputs. The **Copy commands** action is offered only after a valid path selection produces a command preview. These commands grant read access to the certificate/private key and traversal of parent directories; they do not grant write permission.
+
 ## Supported certificate methods
 
 | Mode | Requirements |