use options to add ca_certs to http_client

We found ourselves unable to connect to a new MLS without a few cert files.  This change is working in our production environment.  Let me know if you have any questions, thanks!