[tenebrisalietum]

It's been over a year, but I played around with PKI and installing your own self-signed root certs on iPhone and Android (for HTTPS) was not hard.

[Avamander]

But having to start exchanging root certs is not trivial in mesh environments, it's also insecure if you have to accept someone else's root.