Support arbitrary CA chains

This patch allows a "ca" key argument in the chef-api options.

Omitting this key preserves existing behaviour.

Setting to null explicitly, turns off validation.

Setting to a string containing the CA chain contents, uses that CA chain.