Add proper recursive search and default sections for single variable lookup

Recursive search used to return the first match found, now return the last match
found. Additionally, fall back to an autodetected default section if required.
[CA] Move ca-certificate path to domain section, using key _ca-certificate