Branched from andrii:arcctl-testca-adduser-tofle, should be merged after !454 (merged).
andrii:arcctl-testca-adduser-tofle