Add trusted roots directory

Add trusted roots directory in config dir and include it when invoking
the authorization server.