fix: utilize pulp tools to generate the certs and make them trusted system-wide