pub fn annotate_tls_trust_failure(error: impl Display) -> String
Append the CA configuration that fixes an untrusted peer certificate.