it’s no use to bundle the certs with the package if the binary doesn’t know where they are imo