Restricting Access with Certificate Attributes in Multiple Root Environments-A Recipe for Certificate Masquerading