SSL sockets: Allow specifying cafile or capath without requiring the other