core: validate box_download_ca_cert_file, expand