constants

Context trust constants.

You could argue that the signatures being here is not necessary; indeed, we are not necessarily going to be able to check them properly (based on some prior expectations) as the user, since this is the beginning of trust bootstrapping, the first/backup version of the root of trust metadata. Still, the signatures here are useful for diagnostic purposes, and, more important, to allow self-consistency checks: that helps us avoid breaking the chain of trust if someone accidentally lists the wrong keys down the line. (: The discrepancy can be detected when loading the root data, and we can decline to cache incorrect trust metadata that would make further root updates impossible.

INITIAL_TRUST_ROOT

KEY_MGR_FILE = 'key_mgr.json'