load trusted certs into ssl context prior to handshake