Item

nailer · 2026-10-28T14:37:01.000Z

I imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."

xp84 · 2026-10-28T16:42:32.000Z

Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It should be idempotent, whether the user has already “untrusted” it or not.