> I expect a single CA for node

@example42 Could you perhaps explain why (assuming multiple users can use the same tunnel instance)?