switching to anonymous ssl profile, update STRUST

this seems to work better for eg. bitbucket.org