Hi, currently the private key ist stored on HDD which is quite insecure. I suggest to support FIDO2/CTAP2 security tokens as keystore (see https://en.wikipedia.org/wiki/Client_to_Authenticator_Protocol). Have Phun, Renne