Description of problem:
 Update from si27 => sf7 succeed, however engine doesn't start on https port.

server.log:
====================
2013-02-14 16:49:04,717 ERROR [org.apache.tomcat.util.net.jsse.JSSESocketFactory] (MSC service thread 1-3) Failed to load keystore type PKCS12 with path /etc/pki/ovirt-engine/keys/apache.p12 due to /etc/pki/ovirt-engine/keys/apache.p12 (Permission denied): java.io.FileNotFoundException: /etc/pki/ovirt-engine/keys/apache.p12 (Permission denied)
        at java.io.FileInputStream.open(Native Method) [rt.jar:1.7.0_09-icedtea]
        at java.io.FileInputStream.<init>(FileInputStream.java:138) [rt.jar:1.7.0_09-icedtea]
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:374) [jbossweb.jar:]
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:299) [jbossweb.jar:]



Version-Release number of selected component (if applicable):
sf7

How reproducible:
100%

Steps to Reproduce:
1. install 3.1 without apache as proxy
2. update to 3.2
3.
  
Actual results:
update succeed, but:
engine service is not occupying original https port

ll /etc/pki/ovirt-engine/keys/apache.p12
-rw-r-----. 1 apache apache 4250 Feb 14 16:23 /etc/pki/ovirt-engine/keys/apache.p12

Expected results:
working environ on same port(s) after upgrade

Additional info:
workaround:
chown ovirt:ovirt /etc/pki/ovirt-engine/keys/apache.p12; service ovirt-engine restart