Only adding trusted root on first generation
README update