```release-note:feature
ca: support using an external root CA with the vault CA provider
```