ca_store_dir: /etc/pki/ca-trust/source/anchors
ca_update_cmd: update-ca-trust