search for: overgrow

...s pkcs11 provider library [2] and by flag SSHKEY_FLAG_EXT [3], which is obviously not enough (see the self-explaining comment /* XXX */ [2]). Fortunately, similar question was asked before by different people and there is RFC7512 describing PKCS#11 URI scheme, which quite suits these needs. It can overgrow into ugly monstrosity, but for our case should be enough to note the id (CKA_ID) in scheme. Integration of this idea into openssh would require some changes, which are more complex to do them without discussion as a patch for bugzilla. If you feel this would be useful, I would like to hear upstrea...