)

// WARNING WARNING WARNING
// These interfaces must be stable to allow vendors plug custom CAs.

type RootCertProvider interface {
	GetKeyCertsForCA() (string, string)
	FindRootCAForCA() (string, error)
}

var providers = make(map[string]func(*security.Options, RootCertProvider) (security.Client, error))

func createCitadel(opts *security.Options, a RootCertProvider) (security.Client, error) {