In scenarios where the BOSH director is deployed with a certificate that's already trusted by the system cert pool, I shouldn't have to specify it. We're using a certificate issued by a root CA, and having to go and get the CA certificate is a little awkward.