Add ca_file/ca_path configuration options.

gitlab-shell should provide a way to choose the correct certificates instead of getting users to set self_signed_cert to bypass verification.