[ARCH-30] add proxy TLS certificate to default truststore