Mount the host trust store into zeek, suricata, tcpreplay, the strelka
containers and idh, and restart them when it changes. Point the Python
requests clients in strelka-backend and idh at it instead of certifi.
Remove the frozen /opt/so/conf/ca bundles from every node in ca.trust
rather than only on the manager in soup.
Mike Reeves
02394acf69