@tris@mjg59 It's cute but I don't see how it's any more convenient than just updating /etc/ssl. The problem is not that updating files is hard but that stuff that should not be bundling *user/administrator trust policy* into software is doing so.
@tris@mjg59 Like for fixing the Docker problem, the solution is not FUSE but bind-mounting the host /etc/ssl over the guest /etc/ssl. 🙃 I imagine there's a similar fix for python venvs, etc.