Local CA (between hosts)

[blaggacao]

For if we once require a local CA to establish trust between hosts, this might be a starting point: numtide/devshell#74

[nrdxp]

Probably best solution https://www.tweag.io/blog/2020-12-16-trustix-announcement

[blaggacao]

Another discovery in this problem space: NixOS/nixpkgs#112322