Add CA to self signed cert constraints
Add CA to self signed cert constraints

Some applications require this be set for it to work
as an enrolled certificate.  Notably UEFI
requires this.

jjohnson42/confluent,xcat2/confluent,jjohnson42/confluent,jjohnson42/confluent,jjohnson42/confluent,xcat2/confluent,xcat2/confluent,xcat2/confluent,xcat2/confluent,jjohnson42/confluent