comment out the ca.pem by default
disable fs tls by default