Hey guys, I had some time during layovers/flights and threw a couple of ideas together about how to handle the DB changes we have to perform for fine grained authz and sub CAs, and other future changes .. http://pki.fedoraproject.org/wiki/Tracking_db_migrations Please take a look and comment. Thanks, Ade