- We missed adding this flag to the root CA generation call, but we do support it.
removed_from_cluster