These are recommended (and partly required) by some dependencies
for fetching the public cert as well as for local validation, but
the dependencies only have them as a suggested dependency.

Since local validation is the default mode of operation for this
bundle just hard require them.