With the --use-exit-status option x509ca will now exit with status 10 when the certificates have been modified successfully (unless --check is specified, which takes precedence).