always regenerate the CA config file if necessary