rsyslog forward: Default to BBG CA for TLS Auth