Is there a straight-forward way to add a private CA's root and intermediate certificates to the container?