Use RWMutex instead of Mutex

cert.go

@@ -30,7 +30,7 @@ type CertificateDir struct {
 	CertificateStore
 	dir  bool
 	path string
-	mu   sync.Mutex
+	mu   sync.RWMutex
 }
 
 // Add adds a certificate for the given scope to the store.

tofu.go

@@ -31,7 +31,7 @@ type KnownHosts map[string]Fingerprint
 type KnownHostsFile struct {
 	KnownHosts
 	out io.Writer
-	mu  sync.Mutex
+	mu  sync.RWMutex
 }
 
 // SetOutput sets the output to which new known hosts will be written to.