Go ahead and branch and submit a new pr with the change -- we can move comments to that pr.
The issue here is how will the user know the fingerprint? Seems like the easiest thing is to just point to a cert somehow.