add config option for path to cacert