@badkeys can you clarify why PKCS is the wrong way? Is SPKI better somehow?