Client Certificate Authentication is used to administrate servers securely via SSH, access Virtual Private Networks via OpenVPN [REF].
Password Safe stores encrypted static passwords inside the Nitrokey.