added $ca_port

I needed a way to override ca_port (a valid setting in puppet.conf)