Generate a root CA certificate and remove --zap-cert command line option