Being able to define root certificates in the command line is not enough
for two reasons:
1. It is always global, you cannot define a root certificate for a
specific endpoint.
2. Daemon scripts and unit files are not meant to be changed every time
you need to add a root certificate.
For those reasons, it is now to possible to define root certificates in
the configuration. Those defined in the `global` section will be used on
every endpoint, just like those added via the command line. Those
defined in an endpoint will be used in this endpoint only.