If a bundle file is supplied, provide it directly to builds.
When a bundle *isn't* supplied, build a much more permissive set of
certificates than we do now, and pass that to the build instead.