Fix root CA expiration

Make order-only prereqs the norm

Change-Id: Ibd1af1f6204f5368160fdaabf4f5a79358eb4a52
diff --git a/.gitignore b/.gitignore
index 8bd7ca5..b59f6ba 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@
 *.csr
 *.key
 *_pki
+openvpn