1070737: correct config section for ca_cert_dir