Only downside if osquery were to begin bundling Firefox cert bundle, that's another item to be tracked and maintained. :/