Checking clients not servers
Only create custom cert pool when provided a root ca file