support using a custom CA certificate to verify connections to object storage
