Merge pull request #6056 from apache/nouveau-verify-cacertfile-config

nouveau: always use cacertfile if specified; explicit peer verification