Scary as heck but possible. I implemented an HSM-based signing service for a firmware attestation system a few years ago. Authorization to sign and an audit tr

Scary as heck but possible. I implemented an HSM-based signing service for a firmware attestation system a few years ago. Authorization to sign and an audit trail of signature requests were a big deal. Something like the "plop a file in a directory" would make me weep.