LDAP: configure CA in the Nagios check properly

This is still suboptimal, but should work for now.

Change-Id: I3df1d4ea7647b40fc2021f0f473facf5f80347fd