--capath. Using -k together with one of those just means that the result
of the CA cert check is ignored (but displayed if -v is used).