Mariano Cano

FYI: badger already provides a cli to do a gc, backup, restore, ... The CA should be stopped to do for example a GC, and the tool might need to...

`step-pkcs11-init` will be removed after the v0.23.0 release. `step` + `step-kms-plugin` can be used to create customized certificates using PKCS#11

@hslatman, if you think this PR is covered by #1075, feel free to close it.

`step-ca` is a program in Go, and depending on how it is compiled it will use `/etc/resolv.conf` and `/etc/hosts` if it's using the pure go resolver and it will use...

A hacky solution for this is to override `readline.Stdout` with your own implementation and skip the bell. Here I'm also using `os.Stderr` instead of `os.Stdout` to be able to pipe...

@luizbranco: my hack above works like a charm, but it would be great to be able to be able to set custom Stdin, Stdout, and Stderr in prompts and selects,...

@danlsgiga it really does not matter, just in a package that gets initialized when the program starts. In my case, I have it on a wrapper of the promptui methods...

@Itshardtopickanusername Try to use `windows.SetConsoleMode()` something like this: ```go func init() { var inMode, outMode uint32 if err := windows.GetConsoleMode(windows.Stdin, &inMode); err == nil { inMode |= windows.ENABLE_VIRTUAL_TERMINAL_INPUT if err...

I'm not opposed to adding support for `secp256k1` on the cli, but perhaps a better place for this code would be in [go.step.sm/crypto](https://github.com/smallstep/crypto)

Consider to use PKCS#8 by default, DecryptPEMBlock and EncryptPEMBlock have been deprecated, see https://golang.org/pkg/crypto/x509/#DecryptPEMBlock