Are you patching this for all the uses of get_ca_cert_path? If so, shouldn't the "old way" be removed?