security-setup: clean up CA generation
security-setup: clean up CA generation

 1. Remove unused argument --no-verify-certificates
 2. Make openssl_subject part of the Certificates subclass instead of
 Component, as it's unused anywhere else
 3. Don't generate serial or index.txt, we only needed those for
 generating certificates.
 4. The CA must be generated if there's only a key present - we
 distribute the cert!
 5. Make the root CA valid for 10 years instead of 1 year. The root CA
 should always be valid for as long as possible! We should generate an
 intermediate CA if we want it to be short-lived.

bitium/mantl,CiscoCloud/mantl,bitium/mantl,sehqlr/mantl,KaGeN101/mantl,CiscoCloud/mantl,mantl/mantl,KaGeN101/mantl,datascienceinc/mantl,CiscoCloud/microservices-infrastructure,mantl/mantl,sehqlr/mantl,datascienceinc/mantl,CiscoCloud/microservices-infrastructure