use-this-feature>Reasons to use this feature</h2><ul><li><p>Added Security - Unlike <code>plugin-ca-cert</code> or the default <code>self-signed</code> option, enabling this feature means that the CA private keys need not be present in the Kubernetes cluster.</p></li><li><p>Custom CA Integration - By specifying a Signer name in the Kubernetes CSR Request, this feature allows Istio to integrate with custom Certificate Authorities using the Kubernetes CSR API interface. This does require the custom CA to impl