```release-note:change
secrets/pki: Allow issuance of root CAs without AIA, when templated AIA information includes issuer_id.
```