Merge "cmd/principal: addtoroots can now be used to add (key, blessingpattern) pairs directly (without a blessing)."