Set a tls_server_ca_file (in this case) to avoid self-validation from failing