add an endpoint that will sign with a ca in the path and just give all available authority