If custom CA switch trust_host_root_certs off