I've always wondered what that package is actually used for, because programs like firefox, chromium, &c, maintain their own list of root CAs.