fix for heat client to use correct SSL CA cert