Make host CA configurable with envvar

Signed-off-by: Ben Firshman <ben@firshman.co.uk>