Make HTTPS root certs part of initramfs

• Use a traditional CA trust bundle, and add it to initramfs somewhere (semi-)standard (like /etc/ssl?).
• Users can populate this as they wish, and our default might be to use Mozilla's bundle (at the cost of space).

This affects #89 (closed) and makes #107 (closed) obsolete.