leafCanSignCertificates

Issues the attested leaf as a CA, for chain-extension attack vectors. Never true on a device.