@f7d0478e
I still don't understand why they don't do signing in the hsm.  If the key isn't in memory then it's not in the crashdump. 

 @dcf70cb1 they don’t use HSMs