Are we self-sovereign PKI yet?