pki-sub-ca: shuffle soln 2 to Rejected Designs section