support cacert specification and curl timeout