Need unbundled CA certificates to connect to eduroam

Unless this somehow interferes with self-signed certs, I don’t see why the system trust root shouldn’t be used by default, it’s kind of surprising.
I will look into this.