@kpcyrd I think that making such things an explicit container image layer would also work for some people.

Kubernetes can provide trust DBs and similar via ConfigMaps and mounts, yea - that is commonly done with many things already, such as app configuration files. I would consider trust DBs to be part of app config, thinking about it.