Handle bad CA choice better
Set sysconfdir to /etc