Add option to skip generating `root_pem` into osquery launcher.flags

[lafriks]

Currently there is no way to disable adding root_pem line into launcher.flags when osquery packages are generated.

We use custom so-nginx SSL certificate that is trusted but as generating packages for installation intca is anyway added in launcher.flags root_pem flag, osquery fails to connect to fleet