Function warm_native_roots 

pub fn warm_native_roots() -> Result<Arc<RootCertStore>, NativeRootsError>

Eagerly trigger the first load. Useful when a daemon’s boot path wants to know the trust-store status before any TLS code runs — idempotent; subsequent calls return the cached result without re-touching the OS keychain.

Errors

Same shape as native_roots: returns the cached error if the load failed.