vklimovs@gmail.com Vjaceslavs Klimovs Hold CA keys on a YubiKey PIV applet through sys-apps/pcsc-lite Hold CA keys on PKCS#11 tokens such as HSMs smallstep/certificates