Sign OpenPGP release artifacts with private keys held on a PKCS#11 HSM. Rust CLI built on Sequoia, validated against Entrust nShield in FIPS 140-3 mode. - View it on GitHub