paths:
        configdir: .
        https_cacertfile: /usr/local/etc/catlfish/cacert.pem
        logpublickey: /usr/local/etc/catlfish/logkey.pem
        publickeys: /usr/local/etc/catlfish/publickeys
        privatekeys: /usr/local/etc/catlfish/privatekeys

        https_certfile: /usr/local/etc/catlfish/sign-2.pem
        https_keyfile: /usr/local/etc/catlfish/sign-2-key.pem

hsm:
        library: /usr/lunasa/lib/libCryptoki2_64.so
        slot: 1
        label: CMU Unwrapped ECDSA Private Key
        pin: "@/usr/local/etc/catlfish/lunahsm-pin"