client root CA: add Safari warning screen-shot