configurable deployment of trust anchor previously the TERENA trust anchor was installed only (hard coded) but with this option any trust root can be installed from either an rpm package or a simple PEM file and signing policy pair.