Do not setup CA on replicas by default