Some Flux controllers allow Flux users to trust remote servers on a per-object basis.
For example, Source Controller support CA Bundles to be set at object level, so that TLS connections can be established and trusted when custom PKIs or self-signed certificates are being used. The same applies to known_hosts to SSH connections.

A new RFC should be created to consolidate the topic across the controllers and establish:

• Supported (vs recommended) mechanisms that change the CA Store or known_hosts.
• Ways for Platform Admins to toggle per-object trust overrides.