-cafile command-line option