root-certs: ensure JSON parses properly.