Instead of trusting all certificates with friendly names, now all certs without a "u" flag are trusted as root certs.