fail if lka can't load CAfile