Comment by 616c

Also CAB Forum has started to require private keys in HSM only for code signing certs.