Don't set default for smtp_tls_cacert, and don't include it unless it's ...

...provided