Totally custom, self-maintained PKI

[av-dev]

I think I understand this but I would like to try it out to be sure