If the user has a series of CA certificates required to verify smart card certs (e.g. intermediary CAs and root CA) it is convenient to allow for passing them to the advise scripts as a series of PEM files. https://pagure.io/freeipa/issue/7036 Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>