Permit verifying SSL/TLS certificates against 3rd-party root CAs.
Working on privacy-preserving SSL with nonstandard CA.