more PKCS12 opacity