turn off custom PEM loading and use a self-signed friendly truststore for now.