One thing I'm missing is pkcs11 API in browsers. This seems to not make sense to US devs from what I could see but if you're in EU you can probably commiserate.