Make rootCA configurable