Separate usage of a CA's pkey from a controller | Feature Request

[nenkoru]

Here is an interesting quote from the core contributor from 2022 from this thread:

@andrew.martinez

OpenZiti currently does not support modes where it does not mint certificates. OpenZiti is pretty opinionated in that sense. It is something that can be changed. It does introduce new configuration scenarios, adds complexity, and does put more work on network admins.

Now this whole thing makes sense to me as long as being opinionated.