CA(p *Plan) (*tls.CA, error) {  exists, err := tls.CertKeyPairExists("ca", lp.GeneratedCertsDirectory)  if err != nil {   return nil, fmt.Errorf("error verifying CA certificate/key: %v", err)  }  if exists {   return lp.Get