why?

This is a helper to create and manage x509 Keypairs.

This is used in polyseam/cndi to generate a key-pair used by Kubeseal for encrypting Kubernetes Secrets in a GitOps-friendly way.