Add system certs to bonafide

lilypad/float is now using letsencrypt certs for vpnweb so instead of
instantiating an empty cert pool, we can just use the system pool and
then add the manually configured cert for backwards compatibility.