You likely don't want/need active revocation or advanced PKI functions for service mesh or short-lived workloads. Therefore, we typically recommend our DevOps authority for these use cases.

- What type of Authority do you need

- What account level do you need (which is Teams at a minimum)