I can download the root CA generated in the kube cluster with some kubectl commands and write it locally, but how can I make sure that zed is using them?