I want to connect CH to a TLS kafka cluster.

My producer uses the following to push events:

    'kafka://broker0:9092,broker1:9092,broker2:9092?
     ca_cert=redacted&
     client_cert=redacted&
     client_key=some-long-string&
tls_enabled=true&topic_prefix=some-prefix_' 

how to configure the following from the consumer side (ch kafka table):
ca_cert
client_cert
client_key
tls_enabled

the docs only cover the basic set up, which is plaintext