...which is much easier to implement than X.509 certificates.
...and add to the "main" bundle, but not the "all" bundle, since it adds hundreds of kilobytes to the bundle.