pub fn generate_node_ca_cert<'a>( seed: &'a [u8], dns_suffix: &str, ) -> Result<(NodeID, Certificate, Issuer<'a, KeyPair>)>