--init option is ok: initalize a CA context