RE: https://hachyderm.io/@golang/117470816794707999

Update everything that verifies certificates against public roots.