add installation of local cert chains