pub fn tls_ca_crt() -> PathBuf