Support the 'ca' option to client connections, and remove the verify: false option.