Downside is that you have to provide root/admin access to copy the key material ...

rmoriz 14 days ago | parent | context | favorite | on: Build a tiny CA for your homelab with a Raspberry ...

Downside is that you have to provide root/admin access to copy the key material and also to restart the services. A big no-no for me, even in my homelab.