MFH (r266291): look for root certs in /usr/local first