Don't rely on PKI