accept cacert option