edit (Chef server ships w/trusted CA)