o Use the provider CA cert for every request once we have it bootstrapped (TOFU). Closes #3227.