Make the Rust client the sole app

server/src/main.rs

@@ -186,9 +186,8 @@ async fn main() -> Result<()> {
         .with_context(|| format!("failed to prepare certificates in {}", certs_dir.display()))?;
     if certificates.ca_is_new {
         tracing::warn!(
-            "a new CA was generated in {} -- any installed app pins the previous one and can no \
-             longer reach this server. Rebuild it with app/build-apk.sh, which embeds this CA, \
-             and reinstall through Dev Updater.",
+            "a new CA was generated in {} -- existing enrollments pin the previous one and can no \
+             longer reach this server. Enroll each client again with a newly minted link.",
             certs_dir.display(),
         );
     }