besides, many of those applications depin when you install custom CAs, don't they?