Possibly unrelated, but when using just ca-cert and ca-private-key without the -path reads the files but fails to bootstrap:

```
~$ juju bootstrap maas maas --bootstrap-series focal --config ca-cert="$(cat ./ca-cert.pem)" --config ca-private-key="$(cat ca-private-key.pem)" --debug
15:42:33 INFO  juju.cmd supercommand.go:56 running juju [3.1.6 f6a66aa91eec620f5ac04a19d8c06bef03ae6228 gc go1.20.8]
15:42:33 DEBUG juju.cmd supercommand.go:57   args: []string{"/snap/juju/24626/bin/juju", "bootstrap", "maas", "maas", "--bootstrap-series", "focal", "--config", "ca-cert=-----BEGIN CERTIFICATE-----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\nRCMRarEEGVdPJXwiJsW2E5XSFPbo4HGxRY8uy47AVgQz06rONS/LMEzgEw==\n-----END CERTIFICATE-----", "--config", "ca-private-key=-----BEGIN PRIVATE KEY-----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\nAvNqCg3JVQLabB+C8GtXRD/y\n-----END PRIVATE KEY-----", "--debug"}
15:42:33 DEBUG juju.cmd.juju.commands bootstrap.go:1392 authenticating with region "" and credential "maas" ()
15:42:33 DEBUG juju.cmd.juju.commands bootstrap.go:1551 provider attrs: map[]
15:42:33 INFO  cmd authkeys.go:113 Adding contents of "/home/ubuntu/.local/share/juju/ssh/juju_id_rsa.pub" to authorized-keys
15:42:33 DEBUG juju.cmd.juju.commands bootstrap.go:1621 preparing controller with config: map[agent-metadata-url: agent-stream:released apt-ftp-proxy: apt-http-proxy: apt-https-proxy: apt-mirror: apt-no-proxy: authorized-keys:ssh-rsa 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 juju-client-key
 automatically-retry-hooks:true backup-dir: charmhub-url:https://api.charmhub.io cloudinit-userdata: container-image-metadata-url: container-image-stream:released container-inherit-properties: container-networking-method: default-base: default-space: development:false disable-network-management:false disable-telemetry:false egress-subnets: enable-os-refresh-update:true enable-os-upgrade:true fan-config: firewall-mode:instance ftp-proxy: http-proxy: https-proxy: ignore-machine-addresses:false image-metadata-url: image-stream:released juju-ftp-proxy: juju-http-proxy: juju-https-proxy: juju-no-proxy:127.0.0.1,localhost,::1 logforward-enabled:false logging-config: logging-output: lxd-snap-channel:5.0/stable max-action-results-age:336h max-action-results-size:5G max-status-history-age:336h max-status-history-size:5G mode: name:controller net-bond-reconfigure-delay:17 no-proxy:127.0.0.1,localhost,::1 num-container-provision-workers:4 num-provision-workers:16 provisioner-harvest-mode:destroyed proxy-ssh:false resource-tags: secret-backend:auto snap-http-proxy: snap-https-proxy: snap-store-assertions: snap-store-proxy: snap-store-proxy-url: ssl-hostname-verification:true test-mode:false transmit-vendor-metrics:true type:maas update-status-hook-interval:5m uuid:ab73669d-4228-4217-84b0-8992c0299973]
15:42:33 DEBUG juju.provider.maas environprovider.go:63 opening model "controller".
15:42:33 INFO  cmd bootstrap.go:939 Creating Juju controller "maas" on maas/default
15:42:33 INFO  juju.cmd.juju.commands bootstrap.go:1010 combined bootstrap constraints: 
15:42:33 DEBUG juju.environs.bootstrap bootstrap.go:319 model "controller" supports application/machine networks: true
15:42:33 DEBUG juju.environs.bootstrap bootstrap.go:321 network management by juju enabled: true
15:42:33 INFO  cmd bootstrap.go:406 Loading image metadata
15:42:33 INFO  cmd bootstrap.go:479 Looking for packaged Juju agent version 3.1.6 for amd64
15:42:33 INFO  juju.environs.bootstrap tools.go:78 looking for bootstrap agent binaries: version=3.1.6
15:42:33 DEBUG juju.environs.tools tools.go:87 finding agent binaries in stream: "released"
15:42:33 DEBUG juju.environs.tools tools.go:89 reading agent binaries with major.minor version 3.1
15:42:33 DEBUG juju.environs.tools tools.go:98 filtering agent binaries by version: 3.1.6
15:42:33 DEBUG juju.environs.tools tools.go:101 filtering agent binaries by os type: ubuntu
15:42:33 DEBUG juju.environs.tools tools.go:104 filtering agent binaries by architecture: amd64
15:42:33 DEBUG juju.environs.tools urls.go:133 trying datasource "keystone catalog"
15:42:33 DEBUG juju.environs.simplestreams simplestreams.go:417 searching for signed metadata in datasource "default simplestreams"
15:42:33 DEBUG juju.environs.simplestreams simplestreams.go:451 looking for data index using path streams/v1/index2.sjson
15:42:34 DEBUG juju.environs.simplestreams simplestreams.go:747 using default candidate for content id "com.ubuntu.juju:released:agents" are {20210329 mirrors:1.0 content-download streams/v1/cpc-mirrors-agents.sjson []}
15:42:34 DEBUG juju.environs.simplestreams simplestreams.go:463 looking for data index using URL https://streams.canonical.com/juju/tools/streams/v1/index2.sjson
15:42:34 DEBUG juju.environs.simplestreams simplestreams.go:486 read metadata index at "https://streams.canonical.com/juju/tools/streams/v1/index2.sjson"
15:42:34 DEBUG juju.environs.simplestreams simplestreams.go:1018 finding products at path "streams/v1/com.ubuntu.juju-released-agents.sjson"
15:42:34 INFO  juju.environs.bootstrap tools.go:80 found 1 packaged agent binaries
15:42:34 INFO  cmd bootstrap.go:492 Located Juju agent version 3.1.6-ubuntu-amd64 at https://streams.canonical.com/juju/tools/agent/3.1.6/juju-3.1.6-linux-amd64.tgz
15:42:34 INFO  cmd bootstrap.go:590 Starting new instance for initial controller
15:42:34 INFO  cmd bootstrap.go:184 Launching controller instance(s) on maas/default...
15:42:34 DEBUG juju.provider.maas environ.go:685 attempting to acquire node in zone "default"
15:42:35 DEBUG juju.cloudconfig.instancecfg instancecfg.go:945 Setting numa ctl preference to false
15:42:35 DEBUG juju.provider.maas environ.go:769 maas user data; 3720 bytes
15:42:39 DEBUG juju.provider.maas environ.go:795 started instance "wfdwby"
15:42:39 INFO  cmd bootstrap.go:322  - wfdwby (arch=amd64 mem=4G cores=2)  
15:42:39 INFO  juju.environs.bootstrap bootstrap.go:1010 newest version: 3.1.6
15:42:39 INFO  juju.environs.bootstrap bootstrap.go:1025 picked bootstrap agent binary version: 3.1.6
15:42:39 INFO  cmd bootstrap.go:633 Installing Juju agent on bootstrap instance
15:42:39 ERROR juju.cmd.juju.commands bootstrap.go:968 failed to bootstrap model: finalizing bootstrap instance config: loading juju certificate authority: generating CA leaf: found zero certificates in pem bundle
15:42:39 DEBUG juju.cmd.juju.commands bootstrap.go:969 (error details: [{github.com/juju/juju/cmd/juju/commands.(*bootstrapCommand).Run:1067: failed to bootstrap model} {github.com/juju/juju/environs/bootstrap.Bootstrap:742: } {github.com/juju/juju/environs/bootstrap.bootstrapIAAS:670: finalizing bootstrap instance config} {github.com/juju/juju/environs/bootstrap.finalizeInstanceBootstrapConfig:773: loading juju certificate authority} {github.com/juju/juju/pki.NewDefaultAuthorityPem:224: generating CA leaf} {github.com/juju/juju/pki.NewDefaultLeafPem:198: found zero certificates in pem bundle}])
15:42:39 DEBUG juju.cmd.juju.commands bootstrap.go:1778 cleaning up after failed bootstrap
15:42:39 INFO  juju.provider.common destroy.go:21 destroying model "controller"
15:42:39 INFO  juju.provider.common destroy.go:32 destroying instances
15:42:40 INFO  juju.provider.maas environ.go:961 ignoring error while releasing nodes (Invalid transition: Releasing -> Deploying.); all nodes released OK
15:42:40 INFO  juju.provider.common destroy.go:56 destroying storage
15:42:40 INFO  cmd supercommand.go:535 command finished
```