Allow setting the CA (and maybe other things).
tls_certfp has been added and is one of these.
tls_certfp