You need to make assignments to other admins to manage certificate templates in a multidomain forest. What change is required in Active Directory?