pub fn read_trust_roots(
path: &Path,
now: DateTime<Utc>,
) -> Result<(Vec<TrustedPubkey>, Option<DateTime<Utc>>)>Expand description
Re-read each call so trust.json rotation propagates without restart.
now lets the verifier accept successor keys during the rotation
overlap window (now < retire_at).