[doc] example of how to remove the root ca key