Comment by stop50

For really secure environments you use your own hardware backed ca.