Post #2417027

@agl@infosec.exchange I’d have all the complex HSM stuff be in a separate process, and take the same approach to FIPS that Microsoft does: we are working on getting a version certified, but that version might well be end of life before the certification finishes. Alternatively, I’d put the complex abstraction stuff in a proprietary “enterprise” version, and leave the open source version free of that junk.