Add a 'ca' option to HTTPS config.