-- simulate building with KEYFILE_DEFAULT trust_anchors.keyfile_default = "root1.keys"