_: {
  security.pki.certificateFiles = [ ./labs.adtya.xyz.rootCA.pem ];
}