Documentation contains instructions how to create keys. An untrusted key can be easily created by the user.

Ported from JVET-TuC with small improvements on certificate handling