stroke: Serve ca section CA certificates directly, not over central CA set