allow overriding the local ca
document pki ca