Though, I guess if we think of self.entdir as an abstraction of a cert store (files in /etc, nssdb, etc) we might be close to supporting that.