we could pull out a couple of the lame defaults, like `CHANGE ME` and `localhost` in the issuer...