Add support for multiple ST trust root certs

This is particularly useful if the provisioning OS package is homegrown, while other target OS packages are prepared and signed by someone else.