I'll set it to undef, since in this context the `ca_key_password` parameter doesn't make any sense and would need to be passed in from an external source.