pub const CA_VALIDITY: Duration;Expand description
How long the authority’s own certificate is good for.
Five years: long enough that trusting it is a one-time step rather than a recurring chore, short enough that a key a developer forgot about stops working eventually. A run past the expiry generates a new authority, which has to be trusted again.