default: 2). Optional. verity.roothashsig= path Path to pkcs7 (1ssl) signature of root hash hex string