dirmngr: Use system provided root CAs with KS_FETCH.