Not only does this make us more POSIX, it actually makes things a lot easier because TLS implementations will need to be able to access the trusted certificates file, which most likely will not live in the data directory.
Also made a number of improvmements to tt, making it compatible with more shells.