code: func isFirstStart(authServer *AuthServer, cfg InitConfig) (bool, error) {
  	// check if the CA exists?
  	_, err := authServer.GetCertAuthority(
  		services.CertAuthID{
  			DomainName: cfg.ClusterName.GetClusterName(),
  			Type:       services.HostCA,
  		}, false)
  	if err != nil {
  		if !trace.IsNotFound(err) {
  			return false, trace.Wrap(err)
  		}
  		// CA not found? --> first start!
  		return true, nil
  	}
  	return false, nil
  }
docs: // isFirstStart returns 'true' if the auth server is starting for the 1st time
  // on this server.