add trusted_certs_dir to generated config