Currently, we sign our SAML federation metadata asynchronously using a Hardware Security Module (HSM). We interface with the HSM using PKCS#11. We are interested in signing OIDFederation documents, such as Entity Statements, using our HSM. In this process, the HSM will provide the federation signing key and perform the necessary cryptographic operations to sign the document data.
Is it possible to add PCKS#11 support to Lighthouse (in Go) to support this?