This requires CMS (Cryptographic Message Syntax) which is still unsupported by LibreSSL. Approved by: SSL blanket