Conditionally set OS_CACERT

Don't set OS_CACERT.  This should be overriden in environments which
have a self-signed certs.