from warden-cpi
added in munin/root certs