So is this the use-case for going through the trouble of having a private Root CA that all your machines trust?