I'm looking at our dependencies and noticed that the unix implementation of X509Certificates depends on FileSystemWatcher which we should try to break the dependency on.
dotnet/corefx@0522e19#diff-9c28d44206dff30cadeb4ac3e316aabaR32
I don't know the reliability of FileSystemWatcher on unix but it is notoriously bad on windows and we shouldn't have a dependency on it from a low level library.