pub fn generate_node_cert( node_id: &NodeID, node_ca: &Issuer<'_, KeyPair>, dns_suffix: &str, ) -> Result<CertifiedKey<KeyPair>>