`BUILDKIT HOST` in the docs above is not

[zealous bronze]

Not sure about this one, but using _EXPERIMENTAL_DAGGER_RUNNER_HOST + baking the certs into a custom dagger image still works

[plush wadi]

what certs are you baking?