use options to add ca_certs to http_client