k8s: Validate API server Certificate Authorities