The simplest way of specifying a trust root is via setting a TUF repository URL. The public keys and certificate authorities of Rekor and Fulcio should then be loaded automatically via a TUF client. This will significantly simplify the integration with custom Sigstore deployments such as RHTAS.