From: "Theo de Raadt" <deraadt@openbsd.org>
Subject: Re: update cert.pem
To: Theo Buehler <tb@theobuehler.org>
Cc: tech@openbsd.org
Date: Fri, 01 Nov 2024 09:42:41 -0600

I still want a way for us to ship this to older releases.... or even more-so,
on the fly.

Not pkg_add
Not fw_update
Not syspatch

Something different, unique to this problem and timezone files, that will run
automatically and be trusted to run automatically and do just these, and never
pull a change that breaks system operation and requires a reboot.