Make Rakefile actually produce CA cert (I think)