roots.pem is not added to source control, but is instead saved on GCS.

The func copies roots.pem to docker host, to a location that can referenced by
Dockerfiles using the ADD directive