Support truststore with AAF root certs