polarssl: support CURLOPT_CAPATH / --capath

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
polarassl: avoid memset() when clearing the first byte is enough