* Improve detection of root user * Require OCSPaia and checkHost options for stunnel * Install and use a hand-managed trust store