re-enable CA path support for NSS disabled by curl 7.39.0