added -CA options to valid-client.sh