[opensuse] CA/Private Key Questions