Make cert re-trusting work