Make trusted roots const, implement get-roots.
More robust/automated integration tests