```release-note:improvement
secrets/pki: Restrict issuance of wildcard certificates via role parameter (`allow_wildcard_certificates`)
```