/usr/share/ca-certificates/
Might be enough to copy "$cwd/keys/ca.crt" to there.
https://github.com/matrix-org/sytest/blob/25888269435047f221ab3b0cc50cbafeee7e24d1/lib/SyTest/Homeserver/Synapse.pm#L179-L191