pkg/asset/tls: self-sign aggregator-ca
pkg/asset/tls: self-sign aggregator-ca

Detach aggregator-ca from the root-ca chain in order to make it a proper
independent chain of trust

Part of https://jira.coreos.com/browse/CORS-999

derekhiggins/installer,derekhiggins/installer