the SSLCACertificatePath declaration has to be overridable, and is not always in the same place as ssl_certs_dir