[Avamander]

But having to start exchanging root certs is not trivial in mesh environments, it's also insecure if you have to accept someone else's root.