```release-note:improvement
secrets/pki: Key Usage can now be set on intermediate and root CAs, and CSRs generated by the PKI secret's engine.
```