Tweak the accepted CA JSON format
Tweak the JSON format for discovered root certificates to provide room
for passing back more than just a nickname and a PEM certificate, so
that actually adding things in the future won't be an incompatible
change for helpers.