Conditionally autosigning CA (certificate authority)