s4:lib/tls: add support for gnutls_certificate_set_x509_{system_trust,trust_dir}()