I read yesterday about not putting the clntrust files on a BM server
when your' loading them with a login script.
I asked why but cannot remember where the original question-thread was

so I'll ask again

Why shouldn't the clntrust-files be loaded from a BMserver?
I have it configured like this at the moment at it seems to work fine!