`cacert` used here without being initialized at all.