Add a "get_roots" sub-command to client/ct.