Openziti installation in production like environment

Noting 2 open questions here for easy reference -

  1. How to create a new user identity and use it with custom CA provided identity (x509 certificate) to run ziti cli commands?
  2. Is it possible to enroll routers using custom CA provided identity?