Add note about not trusting cert store