Always install ${PREFIX}/etc/ssl/cert.pem symlink to allow both some base applications some root certificates. Discussed with: des
head/security/ca_root_nss/Makefile