Ok that's what I assumed it probably did (modify the container's certificate trust store), thanks for the explanation.