Same as now. What is inherently anti-OS the way we use certificates? In fact, most apps already use OS-wide root ca lists.
Along similar lines, I think it's strange that I now see warnings in Chrome for SHA-1 certificates but no warnings at all for http.