support masquerade host CA cert pinning