eric https://www.archlinux.org/news/ca-certificates-utils-20170307-1-upgrade-requires-manual-intervention/