{
  security.pki.certificateFiles = [ ./root_ca.crt ];
}