Enterprise certificate management (macOS)
Determinate-nixd accounts for enterprise certificates automatically on macOS.
On startup, the system's Keychain certificates are exported for Nix.
If the certificate store changes, Determinate must to be restarted.