{
  config,
  lib,
  ...
}:
with lib; {
  options.local.pki.byPath = mkOption {
    type = with lib.types; attrsOf unspecified;
    readOnly = true;
  };

  config.local.pki.byPath = let
    caWithLeaves = ca:
      singleton {"${ca.path}" = ca;}
      ++ map (leaf: {"${leaf.path}" = leaf;}) (attrValues ca.leaves);
  in
    mergeAttrsList (flatten (map caWithLeaves (attrValues config.local.pki.ca)));
}