flexibility

[flihp]

Naming things is hard. Anyways we've had occasion to want to specify a certificate / CSR separately from a PKI hierarchy. This is a long way of saying generating one of these structure:

• w/o signing it
• signing it w/ a specific key in the spec itself (not pulled from the platform RNG as we do now)
• setting the signature to a specific value / pattern of bytes

I suppose this is also true of fields that hold any value currently not taken from the spec / KDL so signatures, public keys ... possibly more?

[flihp]

related: #86, #87, #88