o Have it be aware of valid CA certificates by means of security/ca-roots port Approved by: maintainer (timeout 26 Jul 2005)