@eta @q3k anything letting the macOS stack handle TLS is fine, but anything relying on /etc/ssl/cert.pem (e.g. curl) seems to still trust it