restore ka-arcrc when running reset

if doing a dry-run to test setup, this will get modified with the
certificate from the user testing the auth script