ca: Fix regression

null means 'trust the normal certs'
[] means 'trust no certs at all', which is clearly wrong.
v0.1.12