Keep in mind that there are a lot of IOS devices out there now, in some places they represent 30% of the total machines in use. Can you even install a root CA on them?