Add -subca_len global option to set sub-CA path length