Also, I would be really opposed to osquery shipping a firefox certificate bundle