trust-server-cert requires non-interactive