config: fix req_cert, ca, and add json proxyline