Use https://cache.nixos.org instead of http://cache.nixos.org
Provide some fallback defaults for the CA bundle
Add option to disable binary cache certificate checking