code: func (c CertAuthType) Check() error {
  	if c != HostCA && c != UserCA {
  		return trace.BadParameter("'%v' authority type is not supported", c)
  	}
  	return nil
  }
docs: // Check checks if certificate authority type value is correct