(PE- 6014) Create NOOP CA service

One thing to consider here is that we're testing that *no files are created*, so we _could_ point it right at the version-controlled `dev-resources` directory without creating a sandbox or anything.

Unless of course there are other non-CA files that are somehow being created....