Only append to CA_CERT_PATHS if env var is set.