proxy-cert-auth: add cli hook for 'proxy-cert-auth' for creating root certs, tweak help