I've had plenty of success using vecs-cli to add certificates to the SSO TRUSTED_ROOTS store. However, when I view the Trusted Roots in Smart Card authentication section of the GUI, they don't appear, and they won't authenticate users unless I add them through the GUI. Using vecs-cli in the past was easy and automated manage the certificate store. Any ideas?