This would allow intermediate CAs to created and managed by pki.io but having the root CA managed elsewhere (e.g. MS PKI).