Merge pull request #314 from bp88/patch-4

Add clarification to Certificates description

diff --combined README.md
index 21ef1ad1f6d5a0a2e9ca21e610a3eb102f1d298b,778f75994da61d0622ce16b586fd24094d2d0038..69ccf0b47616efc86a2b12ee94a16172751b4018
--- 1/README.md
--- 2/README.md
+++ b/README.md
@@@ -96,7 -96,13 +96,13 @@@ same folder name are grouped together
  }
  ```
  ### Certificates
- This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows. Certificates can be located in the following locations:
+ This policy can be used to install certificates or to read certificates from the system certificate store on Mac and Windows.
+ 
+ The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store.
+ 
+ The Install key by default will search for certificates in the locations listed below. Starting in Firefox 65, you can specify a fully qualified path (see cert3.der and cert4.pem in example). If Firefox does not find something at your fully qualified path, it will search the default directories.
+ 
+ Certificates can be located in the following locations:
  - Windows
    - %USERPROFILE%\AppData\Local\Mozilla\Certificates
    - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
@@@ -107,15 -113,14 +113,14 @@@
    - /usr/lib/mozilla/certificates
    - /usr/lib64/mozilla/certificates
    - ~/.mozilla/certificates
-  
- In Firefox 65, you can specify a fully qualified path.
+ 
  
  ```
  {
    "policies": {
      "Certificates": {
        "ImportEnterpriseRoots": true,
-       "Install": ["cert1.der", "cert2.pem"]
+       "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem"]
      }
    }
  }
@@@ -286,7 -291,7 +291,7 @@@ This policy disables the Refresh Firefo
  }
  ```
  ### DisableSafeMode
 -This policy disables safe mode on Windows only.
 +This policy disables safe mode on Windows and macOS only.
  ```
  {
    "policies": {
@@@ -358,11 -363,9 +363,11 @@@ This policy affects tracking protection
  
  If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
  
 -If Value is set to false, tracking protection is disabled and locked in both the browser and private browsing.
 +If Value is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
  
 -If Value is set to true, tracking protection is enabled by default in both the browser and private browsing and you can choose set the Locked value if you want to prevent the user from changing it.
 +If Value is set to true, tracking protection is enabled by default in both the regular browser and private browsing.
 +
 +You can choose to set the Locked value if you want to prevent the user from changing it.
  ```
  {
    "policies": {