diff --git a/dehydrated.changes b/dehydrated.changes
index ea9cd24..869e5d3 100644
--- a/dehydrated.changes
+++ b/dehydrated.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sun Mar 14 22:29:06 UTC 2021 - Olav Reinert <seroton10@gmail.com>
+
+- Add directory where cleanup can archive unused certificates
+
 -------------------------------------------------------------------
 Wed Mar  3 15:42:18 UTC 2021 - Daniel Molkentin <daniel.molkentin@suse.com>
 
diff --git a/dehydrated.spec b/dehydrated.spec
index 77b7794..ac53f9b 100644
--- a/dehydrated.spec
+++ b/dehydrated.spec
@@ -164,7 +164,7 @@ cp %{SOURCE10} .
 
 %install
 # sensitive keys
-mkdir -p %{buildroot}%{_home}/{accounts,certs,chains}
+mkdir -p %{buildroot}%{_home}/{accounts,archive,certs,chains}
 mkdir -p %{buildroot}%{_sbindir}
 mkdir -p %{buildroot}%{_mandir}/man1
 mkdir -p %{buildroot}%{_home}/config.d
@@ -232,6 +232,7 @@ diff -urN docs/examples/config %{buildroot}%{_home}/config ||:
 %defattr(-,root,root)
 %attr(750,root,%{_user}) %dir %{_sysconfdir}/dehydrated
 %attr(700,%{_user},%{_user}) %dir %{_sysconfdir}/dehydrated/accounts
+%attr(700,%{_user},%{_user}) %dir %{_sysconfdir}/dehydrated/archive
 %attr(700,%{_user},%{_user}) %dir %{_sysconfdir}/dehydrated/certs
 %attr(700,%{_user},%{_user}) %dir %{_sysconfdir}/dehydrated/chains
 %config(noreplace) %attr(640,root,%{_user}) %{_sysconfdir}/dehydrated/config