In this case, you have to compile the OS yourself and patch the trusted certificate store.