#21 optionally including the 'ca' attribute in the certificate creds