UCI defaults script to make OpenSSL accept /etc/ssl/certs/confine-testbed-ca.pem as a CA.