Some ideas for future :) about aws-kms-pkcs11

[ozbenh]

My recent PR adds the ability to get the CERTs from acm-pca which is a step in the direction you want. I wouldn't be hard to put an option to execute something here but when you start executing random things, there are security implications... oh well.

Key Alias already works, just use alias/foo as your key ID :-)

Otherwise I'm sure Ian welcomes pull requests :-)