prefill: fix ca_file to actually expect file and not a directory

This was leftover from an old version which used directory with
certificates instead of bundle in single file.

Related: !511