red.</td></tr><tr><td><code>--server-only</code></td><td>When set, Citadel only serves as a server without writing the Kubernetes secrets.</td></tr><tr><td><code>--sign-ca-certs</code></td><td>Whether Citadel signs certificates for other CAs.</td></tr><tr><td><code>--signing-cert &lt;string></code></td><td>Path to the CA signing certificate file. (default ``)</td></tr><tr><td><code>--signing-key &lt;string></code></td><td>Path to the CA signing key file. (default ``)</td></tr><tr><td><code>--trust-domain &l