ca/cert/key support via cmdline