Uses stderr for errors in ca_setup
Fixes detection of desired csr