Maybe. I’m not sure I’ll know.

I'm having trouble using a delegate key to sign another delegate key, as is shown in the notary key hierarchy diagram (https://github.com/theupdateframework/notary/blob/master/docs/service_architecture.md). Whenever I run

notary delegation add $GUN targets/releases $pem_file --paths="x/osqueryd"

it uses the targets key.