anchor.diff:  +
   ----
   Using slot 1 with a present token (0x4)
  +Public Key Object; RSA 2048 bits
  +  label:      uptanekey
  +  ID:         03
  +  Usage:      encrypt, verify, wrap
   Public Key Object; EC  EC_POINT 256 bits
     EC_POINT:   044104d59c51e5454d46787bdb9db3ea450bc118f71bf5fd352cf0ae4e41720d897eb4051345d0ef5470fd4e3b1c3c18066199915c88eeab7a3ad3e595d4ecaa38f564
     EC_PARAMS:  06082a8648ce3d030107
  
positive.code: base_path = "/var/sota/import"
  tls_cacert_path = "root.crt"
  ----
  
  == Provisioning the device
  
  If all these steps have been followed, the device will establish a TLS connection to the backend using the HSM and will sign its manifests with the uptane key.
  
negative.code: cert_source = "pkcs11"
  pkey_source = "pkcs11"
  
  [p11]
  module = "/usr/lib/opensc-pkcs11.so"
  pass = "1234"
  uptane_key_id = "03"
  tls_clientcert_id = "01"
  