What else should you do to ensure that only users in the marketing department trust certificates issued by this CA?