current state of /etc/pki ?