Microsoft have added a new Alternate Security Identity (AltSecID) for just-in-time certificate deployments in Windows Server 2022 and later. See https://techcommunity.microsoft.com/blog/publicsectorblog/introducing-a-new-issuersid-altsecid/4454231