allow absolute paths and multiple CAs