use system truststore when possible; necessary for .rpm .deb etc packaged node.js whose source is inaccessible