ensure cfssl trust files are updated in the background by the sinatra app

one would generally run this as a separate process or cron, but because of dynos and procfiles, and the fact that the files need to be updated locally for each dyno, it's simpler to keep it within the sinatra process