It would be quite convenient to be able to directly load trusted certificates through the preseed file. This should be pretty straightforward to implement by adding a Certificates member to InitLocalPreseed (shared/api/init.go) and making the configuration logic load any entry found in there.