```release-note:improvement
secrets/pki: Allow tidying of expired issuer certificates.
```