@groob suggested I ask here, does the tls plugin integrate with system root certificates, such that I could use a private cert with a trusted chain rather than having the place a cert on each client?