allow injecting custom CA cert bundles