move process of loading trusted cert files into its own method