Sometimes I feel like I am a capable software engineer and then I come across work like yours and realize how much I don’t know.
Honestly don’t understand this or can even fathom how great this is but good luck!
Very impressive design of the application -- haven't looked into the crypto yet. It reminds me a bit of the design the OpenBSD folks made with letskencrypt/acme-client: https://kristaps.bsd.lv/acme-client/
I just love the design of this code. If more software were written with such keen regard for principle of least-privilege, the entire sham "cyber security" industry might not need to exist.
One of the best pieces of code that I've seen in a while. Thanks for sharing