sslmake: keep root.*!