Naive openssl question… We ship a bundle of root CAs. Should we instead be using the OS cert stores? Is that technically feasible?