Partial support for multiple trust roots in Dorian, still need to support CRLs.