What is correct way to use self-signed certs in ow install?

So far I've gotten ingress to work properly, creating a TLS secret in kubernetes and using that in the standard ingress, but how do I keep the `wsk` cli from having an issue with it?
`wsk property get` shows my local info and then has this error at the end:
```
error: Unable to obtain API build information: Get "https://{working domain with tls}:30194/api/v1": x509: certificate signed by unknown authority
```
I know over in the [wsk cli docs there is a section on client cert](https://github.com/apache/openwhisk/blob/master/docs/cli.md#configure-the-cli-to-use-client-certificate) but they don't mention where or how to edit the `openwhisk_client_ca_cert` it doesn't appear to be a setting on `wsk` cli and searching the openwhisk codebase in github only reveals the documentation notes (searching this codebase in github reveals zero hits) is there an easy way to use my certificate that I generated before (using an internal CA) so I don't have to pass `-i` to the cli?

Thanks again, sorry for the deluge of questions!