option to force acceptance of cert to keychain through bind

I am running a modified version of Patrick Gallagher's wonderful OD bind script but ran into a issue. I have SSL certs distributed through the bind which has caused a issue with the script as I cant figure out the option to force OD to accept the certs and put them in the keychain. Running the script ends up with this Certificates will be automatically added to your system keychain in order to talk to this server. Would you like to continue (y/n)? and running through the options in dsconfigldap doesn't seem to prevent that so the rest of the script fails. Has anyone run into this issue?