pl with new nailgun/nailgo
Compare the entire cert chain in ManagedKeystore
Allow link targets to contribute keys
Harmonize synthetic and real links
CA-sign client keys of sysauth
Changing sysauth to work with CA keys