Managing pkgsrc openssl certs

Now we have certctl(8) for base openssl, what's the recommended way of 
magaging pkgsrc openssl's certs (e.g. /usr/pkg/etc/openssl/certs)?