however, this needs #ifdefs because on Windows we use on-demand loading and add default certificates. On Unix (excluding Mac), it seems we do not need to add the certs.