Better error messaging when unable to install CA cert