PKIX and verification depth.

[Rod Widdowson]

> > However that seems like it might be a pretty dangerous change to make
for
> > people who are not configuring via the V2 legacy trust engines.
> 
> I don't see the danger; don't you end up with a default of 1 either way?

Yup, but what I don't know enough to know is whether that is a sensible
enough default in non-IdP situations to break the current paradigm of
requiring an (application defined) value.