Note the undocumented --cacert switch, which can configure the location path runtime. I aim to change the default path to /var/lib/ca-certificates/ca-bundle.pem. Factory submission: https://build.opensuse.org/request/show/1222091