@bagder does curl have also some explicit support for client cert key authentication? OpenSSL allows pkcs11 token usage. Does it have common interface for other crypto backbends too? It could implemented crypto by pkcs11 module library in theory.