load some certificates so linux doesn't barf