- [ ] Document how to start using this independently (how to create a new CA for example) - [ ] Write automated tests, calling scripts like fos-new and check the results (skip hardware-related parts, or emulate YubiKey somehow?) - [ ] Check this in C