Add a -CAserial argument for signing the user cert request