Add CA certs as trusted to System keychain. When deriving the site_url from Munki's preferences, make sure it ends with a trailing slash