[kjetil]

QWACs are for web sites, not users. CAs have to be audited as a TSP in order to issue them and be approved by the member state.