commands/box/add: custom CA cert [GH-2337]