Teach "test_tls.py" to load default CA certs