A certificate for WPA2 enterprise is a part of a network setup, yet user should store the file somewhere by himself, with the possibility of deleting it accidentally, after which the connection will become unusable (no errors will be reported, just fail to connect).

Also, if user is creating a connection "for everybody" it's not correct to store crt file inside user's home folder, as it's part of the system now. Yet, user doesn't have a permission to write anywhere outside his home folder, which can make it impossible for him to create a WPA2ent connection "for everybody", even if he's allowed to do it by polkit.