ca_file and refresh mechanism