Is there anything preventing the NSA from becoming a root CA?

security.stackexchange.com