(deleted):master
master
This will install the BKCA as a system trusted CA on Debian (and hopefully FreeBSD) and then removes all explicit certificate pinning from any configuration file which should force the use of all system trusted CAs at this point