Option to add custom CAs to the system

would be nice to have an option to add custom CAs to the system in a way that survives upgrades - e.g via a defined ca-directory within /config/auth that gets imported on boot.