diff --git a/awx/main/tests/functional/api/test_settings.py b/awx/main/tests/functional/api/test_settings.py
index a1ae7398a5..0e9bf08297 100644
--- a/awx/main/tests/functional/api/test_settings.py
+++ b/awx/main/tests/functional/api/test_settings.py
@@ -38,7 +38,10 @@ def test_jobs_settings(get, put, patch, delete, admin):
     data.pop('AWX_ANSIBLE_CALLBACK_PLUGINS')
     put(url, user=admin, data=data, expect=200)
     response = get(url, user=admin, expect=200)
-    assert response.data['AWX_ISOLATION_SHOW_PATHS'] == []
+    assert response.data['AWX_ISOLATION_SHOW_PATHS'] == [
+        '/etc/pki/ca-trust:/etc/pki/ca-trust:O',
+        '/usr/share/pki:/usr/share/pki:O',
+    ]
     assert response.data['AWX_ANSIBLE_CALLBACK_PLUGINS'] == []
 
 
diff --git a/awx/settings/defaults.py b/awx/settings/defaults.py
index bc3c2549c3..ef3999a0fd 100644
--- a/awx/settings/defaults.py
+++ b/awx/settings/defaults.py
@@ -589,7 +589,10 @@ GALAXY_IGNORE_CERTS = False
 
 # Additional paths to show for jobs using process isolation.
 # Note: This setting may be overridden by database settings.
-AWX_ISOLATION_SHOW_PATHS = []
+AWX_ISOLATION_SHOW_PATHS = [
+    '/etc/pki/ca-trust:/etc/pki/ca-trust:O',
+    '/usr/share/pki:/usr/share/pki:O',
+]
 
 # The directory in which the service will create new temporary directories for job
 # execution and isolation (such as credential files and custom