certified-update

An executable that downloads a current cert bundle and replaces the
old one. Keep current people!
@badger do you mind if this pulls from your ca-bundle repo.