[PATCH 03/16] tls: Support loading multiple root CAs