add default curl ca-bundle path in CA_CERTS_PATH