document default location of tlsdate-ca-roots.conf