caroot: add @generated tags to extracted .pem

As is the current trend; while these files are manually curated, they are
still generated.  If they end up in a review, it would be helpful to also
take the hint and hide them.

secure/caroot/MAca-bundle.pl

@@ -39,6 +39,7 @@ use MIME::Base64;
 use Getopt::Long;
 
 my $VERSION = '$FreeBSD$';
+my $generated = '@' . 'generated';
 my $inputfh = *STDIN;
 my $debug = 0;
 my $infile;
@@ -78,6 +79,8 @@ sub print_header($$)
 ##  Extracted from nss
 ##  with $VERSION
 ##
+##  $generated
+##
 EOFH
     } else {
 	print $dstfile <<EOH;
@@ -91,6 +94,8 @@ EOFH
 ##  Extracted from nss
 ##  with $VERSION
 ##
+##  $generated
+##
 EOH
     }
 }