Re: Maintaining CAs not in cert.pem

[lists]

> What threat models do we want to address

The one addressing your maintenance of the certification
infrastructure.