Set apps.pki.certificate_authorities.local.install_trust.
Idempotent. Mutates in place. Throws when an intermediate node
exists but isn't an object — silent retyping would corrupt unrelated
state.
Motivating case: on Windows the local CA's first issuance triggers
UAC + certutil (5–30 s), blocking the admin API.
Set
apps.pki.certificate_authorities.local.install_trust. Idempotent. Mutates in place. Throws when an intermediate node exists but isn't an object — silent retyping would corrupt unrelated state.Motivating case: on Windows the local CA's first issuance triggers UAC +
certutil(5–30 s), blocking the admin API.