7d5106d
- note that PKCS#12 files also contain private keys, and that the "pkinit" options refer to the KDC's credentials