```release-note:improvement
secrets/pki: Use transactions for root generation, issuer import
```
