- [ ] Store root CA on file system - [ ] Validate on start, recreate when expired - [ ] (opt) Allow user to export/import Root CA