1:  b01812f604 ! 1:  7618037c86 libpq: add sslrootcert=system to use default CAs
    @@ .cirrus.yml: task:
     +    # the etc/ prefix, so we hardcode the full path here. openssl@3 is pinned
     +    # above to try to minimize the chances of this changing beneath us, but it's
     +    # brittle...
    -+    mkdir -p "/usr/local/etc/openssl@3/certs"
    ++    mkdir -p "/opt/homebrew/etc/openssl@3/certs"
        upload_caches: homebrew
      
        ccache_cache:
2:  432453942a = 2:  c392e1796e libpq: force sslmode=verify-full for system CAs