add ca_file to security config