config: support `ca` and `request_cert` options