docs: document cafile config setting