that, or we could maybe add a tls cert bundle from firefox or something to the osquery package distribution on os x?