My mistake, I missed this part: "This example assumes that two
marginally-trusted keys or one fully-trusted key is needed to validate another
key. The maximum path length is three."