Comment 1 for bug 118963

I think this bug can be raised to Wishlist in Ubuntu as it currently gets no attention in Debian and solved by the proposal here or in the Debian Bug Tracker. Doing so will increase postfix administrator experience.

Probably it's even better to put the certificates inside the chroot and only symlinking outside the chroot as this will save some efforts and does not brake chroot.