fixes to insecure command line option and ca path handling