The `trustca` role can be used to add CA certificates to the system trust store. It requires a variable, `ca`, to be defined, referring to the name of a file containing a CA certificate to install.