Add cardID to root credential

The root credential needs some sort of card ID so we can revoke cards.