
In configure.ac and CMakeLists.txt, check for the header Security/SecTrustSettings.h. If this header is found, enable the feature. If it isn't, disable it. For non-configure/non-CMake builds, require the user to explicitly define HAVE_SECURITY_SECTRUSTSETTINGS_H if they want to use system CA certs (handled in settings.h).