Default paths to CA bundles, but use only if exist

In response to #146