{

my $ca = $pam_cas{'CaCert'} || '/etc/pki/tls/certs/ca-bundle.crt';

$OUT .= "trusted_ca $ca\n";

}