Diff of the two buildlogs:

--
--- b1/build.log	2021-08-20 23:23:44.863695460 +0000
+++ b2/build.log	2021-08-20 23:26:37.773235004 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Fri Aug 20 11:08:59 -12 2021
-I: pbuilder-time-stamp: 1629500939
+I: Current time: Sat Aug 21 13:24:03 +14 2021
+I: pbuilder-time-stamp: 1629501843
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/bullseye-reproducible-base.tgz]
 I: copying local configuration
@@ -16,8 +16,8 @@
 I: copying [./certmonger_0.79.13-3.diff.gz]
 I: Extracting source
 gpgv: unknown type of key resource 'trustedkeys.kbx'
-gpgv: keyblock resource '/tmp/dpkg-verify-sig.JE0GJsm3/trustedkeys.kbx': General error
-gpgv: Signature made Mon Nov  2 20:47:17 2020 -12
+gpgv: keyblock resource '/tmp/dpkg-verify-sig.ANMzgzd8/trustedkeys.kbx': General error
+gpgv: Signature made Tue Nov  3 22:47:17 2020 +14
 gpgv:                using RSA key 752DE27C4DEB17019B4B6623CB703165A88984DC
 gpgv: Can't check signature: No public key
 dpkg-source: warning: failed to verify signature on ./certmonger_0.79.13-3.dsc
@@ -26,135 +26,169 @@
 dpkg-source: info: applying certmonger_0.79.13-3.diff.gz
 I: using fakeroot in build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/23771/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/14036/tmp/hooks/D01_modify_environment starting
+debug: Running on virt64c.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+Removing 'diversion of /bin/sh to /bin/sh.distrib by dash'
+Adding 'diversion of /bin/sh to /bin/sh.distrib by bash'
+Removing 'diversion of /usr/share/man/man1/sh.1.gz to /usr/share/man/man1/sh.distrib.1.gz by dash'
+Adding 'diversion of /usr/share/man/man1/sh.1.gz to /usr/share/man/man1/sh.distrib.1.gz by bash'
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/14036/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/14036/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='armhf'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all,-fixfilepath parallel=3'
-  DISTRIBUTION=''
-  HOME='/root'
-  HOST_ARCH='armhf'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:hostcomplete:interactive_comments:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="1" [2]="4" [3]="1" [4]="release" [5]="arm-unknown-linux-gnueabihf")
+  BASH_VERSION='5.1.4(1)-release'
+  BUILDDIR=/build
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=armhf
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all,-fixfilepath parallel=4'
+  DIRSTACK=()
+  DISTRIBUTION=
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=arm
+  HOST_ARCH=armhf
   IFS=' 	
   '
-  INVOCATION_ID='d4ecf384820f42d1a354f365202e3654'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='23771'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=78fcc83ef96c4ba394a77e442162fc74
+  LANG=C
+  LANGUAGE=it_CH:it
+  LC_ALL=C
+  MACHTYPE=arm-unknown-linux-gnueabihf
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnueabihf
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=14036
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/tmp.nlKYtDz8PC/pbuilderrc_F7tl --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bullseye-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/tmp.nlKYtDz8PC/b1 --logfile b1/build.log certmonger_0.79.13-3.dsc'
-  SUDO_GID='116'
-  SUDO_UID='112'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://10.0.0.15:8000/'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/tmp.nlKYtDz8PC/pbuilderrc_5FGc --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bullseye-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/tmp.nlKYtDz8PC/b2 --logfile b2/build.log certmonger_0.79.13-3.dsc'
+  SUDO_GID=113
+  SUDO_UID=107
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://10.0.0.15:8000/
 I: uname -a
-  Linux cbxi4b 5.10.0-8-armmp #1 SMP Debian 5.10.46-4 (2021-08-03) armv7l GNU/Linux
+  Linux i-capture-the-hostname 5.10.0-8-arm64 #1 SMP Debian 5.10.46-4 (2021-08-03) aarch64 GNU/Linux
 I: ls -l /bin
   total 3580
-  -rwxr-xr-x 1 root root 816764 Aug  4 08:25 bash
-  -rwxr-xr-x 3 root root  26052 Jul 20  2020 bunzip2
-  -rwxr-xr-x 3 root root  26052 Jul 20  2020 bzcat
-  lrwxrwxrwx 1 root root      6 Jul 20  2020 bzcmp -> bzdiff
-  -rwxr-xr-x 1 root root   2225 Jul 20  2020 bzdiff
-  lrwxrwxrwx 1 root root      6 Jul 20  2020 bzegrep -> bzgrep
-  -rwxr-xr-x 1 root root   4877 Sep  4  2019 bzexe
-  lrwxrwxrwx 1 root root      6 Jul 20  2020 bzfgrep -> bzgrep
-  -rwxr-xr-x 1 root root   3775 Jul 20  2020 bzgrep
-  -rwxr-xr-x 3 root root  26052 Jul 20  2020 bzip2
-  -rwxr-xr-x 1 root root   9636 Jul 20  2020 bzip2recover
-  lrwxrwxrwx 1 root root      6 Jul 20  2020 bzless -> bzmore
-  -rwxr-xr-x 1 root root   1297 Jul 20  2020 bzmore
-  -rwxr-xr-x 1 root root  26668 Sep 22  2020 cat
-  -rwxr-xr-x 1 root root  43104 Sep 22  2020 chgrp
-  -rwxr-xr-x 1 root root  38984 Sep 22  2020 chmod
-  -rwxr-xr-x 1 root root  43112 Sep 22  2020 chown
-  -rwxr-xr-x 1 root root  92616 Sep 22  2020 cp
-  -rwxr-xr-x 1 root root  75524 Dec 10  2020 dash
-  -rwxr-xr-x 1 root root  75880 Sep 22  2020 date
-  -rwxr-xr-x 1 root root  55436 Sep 22  2020 dd
-  -rwxr-xr-x 1 root root  59912 Sep 22  2020 df
-  -rwxr-xr-x 1 root root  96764 Sep 22  2020 dir
-  -rwxr-xr-x 1 root root  55012 Jul 28 07:09 dmesg
-  lrwxrwxrwx 1 root root      8 Nov  6  2019 dnsdomainname -> hostname
-  lrwxrwxrwx 1 root root      8 Nov  6  2019 domainname -> hostname
-  -rwxr-xr-x 1 root root  22508 Sep 22  2020 echo
-  -rwxr-xr-x 1 root root     28 Nov  9  2020 egrep
-  -rwxr-xr-x 1 root root  22496 Sep 22  2020 false
-  -rwxr-xr-x 1 root root     28 Nov  9  2020 fgrep
-  -rwxr-xr-x 1 root root  47492 Jul 28 07:09 findmnt
-  -rwsr-xr-x 1 root root  26076 Feb 26 04:12 fusermount
-  -rwxr-xr-x 1 root root 124508 Nov  9  2020 grep
-  -rwxr-xr-x 2 root root   2346 Mar  2 11:30 gunzip
-  -rwxr-xr-x 1 root root   6376 Mar  2 11:30 gzexe
-  -rwxr-xr-x 1 root root  64212 Mar  2 11:30 gzip
-  -rwxr-xr-x 1 root root  13784 Nov  6  2019 hostname
-  -rwxr-xr-x 1 root root  43180 Sep 22  2020 ln
-  -rwxr-xr-x 1 root root  35068 Feb  7  2020 login
-  -rwxr-xr-x 1 root root  96764 Sep 22  2020 ls
-  -rwxr-xr-x 1 root root  99940 Jul 28 07:09 lsblk
-  -rwxr-xr-x 1 root root  51408 Sep 22  2020 mkdir
-  -rwxr-xr-x 1 root root  43184 Sep 22  2020 mknod
-  -rwxr-xr-x 1 root root  30780 Sep 22  2020 mktemp
-  -rwxr-xr-x 1 root root  34408 Jul 28 07:09 more
-  -rwsr-xr-x 1 root root  34400 Jul 28 07:09 mount
-  -rwxr-xr-x 1 root root   9824 Jul 28 07:09 mountpoint
-  -rwxr-xr-x 1 root root  88524 Sep 22  2020 mv
-  lrwxrwxrwx 1 root root      8 Nov  6  2019 nisdomainname -> hostname
-  lrwxrwxrwx 1 root root     14 Apr 18 03:38 pidof -> /sbin/killall5
-  -rwxr-xr-x 1 root root  26652 Sep 22  2020 pwd
-  lrwxrwxrwx 1 root root      4 Aug  4 08:25 rbash -> bash
-  -rwxr-xr-x 1 root root  30740 Sep 22  2020 readlink
-  -rwxr-xr-x 1 root root  43104 Sep 22  2020 rm
-  -rwxr-xr-x 1 root root  30732 Sep 22  2020 rmdir
-  -rwxr-xr-x 1 root root  14144 Sep 27  2020 run-parts
-  -rwxr-xr-x 1 root root  76012 Dec 22  2018 sed
-  lrwxrwxrwx 1 root root      4 Aug 14 21:30 sh -> dash
-  -rwxr-xr-x 1 root root  22532 Sep 22  2020 sleep
-  -rwxr-xr-x 1 root root  55360 Sep 22  2020 stty
-  -rwsr-xr-x 1 root root  46704 Jul 28 07:09 su
-  -rwxr-xr-x 1 root root  22532 Sep 22  2020 sync
-  -rwxr-xr-x 1 root root 340872 Feb 16  2021 tar
-  -rwxr-xr-x 1 root root   9808 Sep 27  2020 tempfile
-  -rwxr-xr-x 1 root root  67696 Sep 22  2020 touch
-  -rwxr-xr-x 1 root root  22496 Sep 22  2020 true
-  -rwxr-xr-x 1 root root   9636 Feb 26 04:12 ulockmgr_server
-  -rwsr-xr-x 1 root root  22108 Jul 28 07:09 umount
-  -rwxr-xr-x 1 root root  22520 Sep 22  2020 uname
-  -rwxr-xr-x 2 root root   2346 Mar  2 11:30 uncompress
-  -rwxr-xr-x 1 root root  96764 Sep 22  2020 vdir
-  -rwxr-xr-x 1 root root  38512 Jul 28 07:09 wdctl
-  lrwxrwxrwx 1 root root      8 Nov  6  2019 ypdomainname -> hostname
-  -rwxr-xr-x 1 root root   1984 Mar  2 11:30 zcat
-  -rwxr-xr-x 1 root root   1678 Mar  2 11:30 zcmp
-  -rwxr-xr-x 1 root root   5880 Mar  2 11:30 zdiff
-  -rwxr-xr-x 1 root root     29 Mar  2 11:30 zegrep
-  -rwxr-xr-x 1 root root     29 Mar  2 11:30 zfgrep
-  -rwxr-xr-x 1 root root   2081 Mar  2 11:30 zforce
-  -rwxr-xr-x 1 root root   7585 Mar  2 11:30 zgrep
-  -rwxr-xr-x 1 root root   2206 Mar  2 11:30 zless
-  -rwxr-xr-x 1 root root   1842 Mar  2 11:30 zmore
-  -rwxr-xr-x 1 root root   4553 Mar  2 11:30 znew
-I: user script /srv/workspace/pbuilder/23771/tmp/hooks/D02_print_environment finished
+  -rwxr-xr-x 1 root root 816764 Aug  5 10:25 bash
+  -rwxr-xr-x 3 root root  26052 Jul 21  2020 bunzip2
+  -rwxr-xr-x 3 root root  26052 Jul 21  2020 bzcat
+  lrwxrwxrwx 1 root root      6 Jul 21  2020 bzcmp -> bzdiff
+  -rwxr-xr-x 1 root root   2225 Jul 21  2020 bzdiff
+  lrwxrwxrwx 1 root root      6 Jul 21  2020 bzegrep -> bzgrep
+  -rwxr-xr-x 1 root root   4877 Sep  5  2019 bzexe
+  lrwxrwxrwx 1 root root      6 Jul 21  2020 bzfgrep -> bzgrep
+  -rwxr-xr-x 1 root root   3775 Jul 21  2020 bzgrep
+  -rwxr-xr-x 3 root root  26052 Jul 21  2020 bzip2
+  -rwxr-xr-x 1 root root   9636 Jul 21  2020 bzip2recover
+  lrwxrwxrwx 1 root root      6 Jul 21  2020 bzless -> bzmore
+  -rwxr-xr-x 1 root root   1297 Jul 21  2020 bzmore
+  -rwxr-xr-x 1 root root  26668 Sep 23  2020 cat
+  -rwxr-xr-x 1 root root  43104 Sep 23  2020 chgrp
+  -rwxr-xr-x 1 root root  38984 Sep 23  2020 chmod
+  -rwxr-xr-x 1 root root  43112 Sep 23  2020 chown
+  -rwxr-xr-x 1 root root  92616 Sep 23  2020 cp
+  -rwxr-xr-x 1 root root  75524 Dec 11  2020 dash
+  -rwxr-xr-x 1 root root  75880 Sep 23  2020 date
+  -rwxr-xr-x 1 root root  55436 Sep 23  2020 dd
+  -rwxr-xr-x 1 root root  59912 Sep 23  2020 df
+  -rwxr-xr-x 1 root root  96764 Sep 23  2020 dir
+  -rwxr-xr-x 1 root root  55012 Jul 29 09:09 dmesg
+  lrwxrwxrwx 1 root root      8 Nov  8  2019 dnsdomainname -> hostname
+  lrwxrwxrwx 1 root root      8 Nov  8  2019 domainname -> hostname
+  -rwxr-xr-x 1 root root  22508 Sep 23  2020 echo
+  -rwxr-xr-x 1 root root     28 Nov 10  2020 egrep
+  -rwxr-xr-x 1 root root  22496 Sep 23  2020 false
+  -rwxr-xr-x 1 root root     28 Nov 10  2020 fgrep
+  -rwxr-xr-x 1 root root  47492 Jul 29 09:09 findmnt
+  -rwsr-xr-x 1 root root  26076 Feb 27 06:12 fusermount
+  -rwxr-xr-x 1 root root 124508 Nov 10  2020 grep
+  -rwxr-xr-x 2 root root   2346 Mar  3 13:30 gunzip
+  -rwxr-xr-x 1 root root   6376 Mar  3 13:30 gzexe
+  -rwxr-xr-x 1 root root  64212 Mar  3 13:30 gzip
+  -rwxr-xr-x 1 root root  13784 Nov  8  2019 hostname
+  -rwxr-xr-x 1 root root  43180 Sep 23  2020 ln
+  -rwxr-xr-x 1 root root  35068 Feb  8  2020 login
+  -rwxr-xr-x 1 root root  96764 Sep 23  2020 ls
+  -rwxr-xr-x 1 root root  99940 Jul 29 09:09 lsblk
+  -rwxr-xr-x 1 root root  51408 Sep 23  2020 mkdir
+  -rwxr-xr-x 1 root root  43184 Sep 23  2020 mknod
+  -rwxr-xr-x 1 root root  30780 Sep 23  2020 mktemp
+  -rwxr-xr-x 1 root root  34408 Jul 29 09:09 more
+  -rwsr-xr-x 1 root root  34400 Jul 29 09:09 mount
+  -rwxr-xr-x 1 root root   9824 Jul 29 09:09 mountpoint
+  -rwxr-xr-x 1 root root  88524 Sep 23  2020 mv
+  lrwxrwxrwx 1 root root      8 Nov  8  2019 nisdomainname -> hostname
+  lrwxrwxrwx 1 root root     14 Apr 19 05:38 pidof -> /sbin/killall5
+  -rwxr-xr-x 1 root root  26652 Sep 23  2020 pwd
+  lrwxrwxrwx 1 root root      4 Aug  5 10:25 rbash -> bash
+  -rwxr-xr-x 1 root root  30740 Sep 23  2020 readlink
+  -rwxr-xr-x 1 root root  43104 Sep 23  2020 rm
+  -rwxr-xr-x 1 root root  30732 Sep 23  2020 rmdir
+  -rwxr-xr-x 1 root root  14144 Sep 28  2020 run-parts
+  -rwxr-xr-x 1 root root  76012 Dec 23  2018 sed
+  lrwxrwxrwx 1 root root      4 Aug 21 13:24 sh -> bash
+  lrwxrwxrwx 1 root root      4 Aug 14 23:24 sh.distrib -> dash
+  -rwxr-xr-x 1 root root  22532 Sep 23  2020 sleep
+  -rwxr-xr-x 1 root root  55360 Sep 23  2020 stty
+  -rwsr-xr-x 1 root root  46704 Jul 29 09:09 su
+  -rwxr-xr-x 1 root root  22532 Sep 23  2020 sync
+  -rwxr-xr-x 1 root root 340872 Feb 17  2021 tar
+  -rwxr-xr-x 1 root root   9808 Sep 28  2020 tempfile
+  -rwxr-xr-x 1 root root  67696 Sep 23  2020 touch
+  -rwxr-xr-x 1 root root  22496 Sep 23  2020 true
+  -rwxr-xr-x 1 root root   9636 Feb 27 06:12 ulockmgr_server
+  -rwsr-xr-x 1 root root  22108 Jul 29 09:09 umount
+  -rwxr-xr-x 1 root root  22520 Sep 23  2020 uname
+  -rwxr-xr-x 2 root root   2346 Mar  3 13:30 uncompress
+  -rwxr-xr-x 1 root root  96764 Sep 23  2020 vdir
+  -rwxr-xr-x 1 root root  38512 Jul 29 09:09 wdctl
+  lrwxrwxrwx 1 root root      8 Nov  8  2019 ypdomainname -> hostname
+  -rwxr-xr-x 1 root root   1984 Mar  3 13:30 zcat
+  -rwxr-xr-x 1 root root   1678 Mar  3 13:30 zcmp
+  -rwxr-xr-x 1 root root   5880 Mar  3 13:30 zdiff
+  -rwxr-xr-x 1 root root     29 Mar  3 13:30 zegrep
+  -rwxr-xr-x 1 root root     29 Mar  3 13:30 zfgrep
+  -rwxr-xr-x 1 root root   2081 Mar  3 13:30 zforce
+  -rwxr-xr-x 1 root root   7585 Mar  3 13:30 zgrep
+  -rwxr-xr-x 1 root root   2206 Mar  3 13:30 zless
+  -rwxr-xr-x 1 root root   1842 Mar  3 13:30 zmore
+  -rwxr-xr-x 1 root root   4553 Mar  3 13:30 znew
+I: user script /srv/workspace/pbuilder/14036/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -334,7 +368,7 @@
 Get: 96 http://deb.debian.org/debian bullseye/main armhf quilt all 0.66-2.1 [319 kB]
 Get: 97 http://deb.debian.org/debian bullseye/main armhf uuid-dev armhf 2.36.1-8 [97.9 kB]
 Get: 98 http://deb.debian.org/debian bullseye/main armhf libidn2-dev armhf 2.3.0-5 [84.6 kB]
-Fetched 45.6 MB in 11s (4311 kB/s)
+Fetched 45.6 MB in 5s (9271 kB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package libapparmor1:armhf.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19398 files and directories currently installed.)
@@ -752,7 +786,8 @@
 fakeroot is already the newest version (1.25.3-1.1).
 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 I: Building the package
-I: Running cd /build/certmonger-0.79.13/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../certmonger_0.79.13-3_source.changes
+hostname: Name or service not known
+I: Running cd /build/certmonger-0.79.13/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../certmonger_0.79.13-3_source.changes
 dpkg-buildpackage: info: source package certmonger
 dpkg-buildpackage: info: source version 0.79.13-3
 dpkg-buildpackage: info: source distribution unstable
@@ -1120,64 +1155,64 @@
 config.status: executing src_introspect_sh commands
 make[1]: Leaving directory '/build/certmonger-0.79.13'
    dh_auto_build -O--builddirectory=build/
-	cd build && make -j3
+	cd build && make -j4
 make[1]: Entering directory '/build/certmonger-0.79.13/build'
 Making all in po
 make[2]: Entering directory '/build/certmonger-0.79.13/build/po'
 test ! -f ../../po/certmonger.pot || \
   test -z "../../po/bg.gmo ../../po/ca.gmo ../../po/cs_CZ.gmo ../../po/da.gmo ../../po/de.gmo ../../po/es.gmo ../../po/eu.gmo ../../po/fr.gmo ../../po/gu.gmo ../../po/hu.gmo ../../po/id.gmo ../../po/it.gmo ../../po/ja.gmo ../../po/lt.gmo ../../po/nb.gmo ../../po/nl.gmo ../../po/pl.gmo ../../po/pt.gmo ../../po/pt_BR.gmo ../../po/ru.gmo ../../po/sv.gmo ../../po/ta.gmo ../../po/tr.gmo ../../po/uk.gmo ../../po/zh_CN.gmo ../../po/zh_TW.gmo" || make ../../po/bg.gmo ../../po/ca.gmo ../../po/cs_CZ.gmo ../../po/da.gmo ../../po/de.gmo ../../po/es.gmo ../../po/eu.gmo ../../po/fr.gmo ../../po/gu.gmo ../../po/hu.gmo ../../po/id.gmo ../../po/it.gmo ../../po/ja.gmo ../../po/lt.gmo ../../po/nb.gmo ../../po/nl.gmo ../../po/pl.gmo ../../po/pt.gmo ../../po/pt_BR.gmo ../../po/ru.gmo ../../po/sv.gmo ../../po/ta.gmo ../../po/tr.gmo ../../po/uk.gmo ../../po/zh_CN.gmo ../../po/zh_TW.gmo
 make[3]: Entering directory '/build/certmonger-0.79.13/build/po'
+cd ../../po && rm -f cs_CZ.gmo && /usr/bin/msgfmt -c --statistics --verbose -o cs_CZ.gmo cs_CZ.po
 cd ../../po && rm -f bg.gmo && /usr/bin/msgfmt -c --statistics --verbose -o bg.gmo bg.po
+cd ../../po && rm -f da.gmo && /usr/bin/msgfmt -c --statistics --verbose -o da.gmo da.po
 cd ../../po && rm -f ca.gmo && /usr/bin/msgfmt -c --statistics --verbose -o ca.gmo ca.po
-cd ../../po && rm -f cs_CZ.gmo && /usr/bin/msgfmt -c --statistics --verbose -o cs_CZ.gmo cs_CZ.po
+cs_CZ.po: 9 translated messages, 7 fuzzy translations, 457 untranslated messages.
+da.po: 153 translated messages, 12 fuzzy translations, 308 untranslated messages.
 bg.po: 198 translated messages, 18 fuzzy translations, 257 untranslated messages.
 ca.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
-cd ../../po && rm -f da.gmo && /usr/bin/msgfmt -c --statistics --verbose -o da.gmo da.po
-cs_CZ.po: 9 translated messages, 7 fuzzy translations, 457 untranslated messages.
 cd ../../po && rm -f de.gmo && /usr/bin/msgfmt -c --statistics --verbose -o de.gmo de.po
 cd ../../po && rm -f es.gmo && /usr/bin/msgfmt -c --statistics --verbose -o es.gmo es.po
-da.po: 153 translated messages, 12 fuzzy translations, 308 untranslated messages.
-de.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
 cd ../../po && rm -f eu.gmo && /usr/bin/msgfmt -c --statistics --verbose -o eu.gmo eu.po
-es.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
 cd ../../po && rm -f fr.gmo && /usr/bin/msgfmt -c --statistics --verbose -o fr.gmo fr.po
-cd ../../po && rm -f gu.gmo && /usr/bin/msgfmt -c --statistics --verbose -o gu.gmo gu.po
 eu.po: 9 translated messages, 2 fuzzy translations, 462 untranslated messages.
-gu.po: 33 translated messages, 3 fuzzy translations, 437 untranslated messages.
+de.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
+es.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
 fr.po: 228 translated messages, 18 fuzzy translations, 227 untranslated messages.
+cd ../../po && rm -f gu.gmo && /usr/bin/msgfmt -c --statistics --verbose -o gu.gmo gu.po
 cd ../../po && rm -f hu.gmo && /usr/bin/msgfmt -c --statistics --verbose -o hu.gmo hu.po
 cd ../../po && rm -f id.gmo && /usr/bin/msgfmt -c --statistics --verbose -o id.gmo id.po
 cd ../../po && rm -f it.gmo && /usr/bin/msgfmt -c --statistics --verbose -o it.gmo it.po
+gu.po: 33 translated messages, 3 fuzzy translations, 437 untranslated messages.
 hu.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
 id.po: 125 translated messages, 11 fuzzy translations, 337 untranslated messages.
-it.po: cd ../../po && rm -f ja.gmo && /usr/bin/msgfmt -c --statistics --verbose -o ja.gmo ja.po
-171 translated messages, 12 fuzzy translations, 290 untranslated messages.
+cd ../../po && rm -f ja.gmo && /usr/bin/msgfmt -c --statistics --verbose -o ja.gmo ja.po
 cd ../../po && rm -f lt.gmo && /usr/bin/msgfmt -c --statistics --verbose -o lt.gmo lt.po
+it.po: 171 translated messages, 12 fuzzy translations, 290 untranslated messages.
 cd ../../po && rm -f nb.gmo && /usr/bin/msgfmt -c --statistics --verbose -o nb.gmo nb.po
-lt.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
-ja.po: 200 translated messages, 18 fuzzy translations, 255 untranslated messages.
 cd ../../po && rm -f nl.gmo && /usr/bin/msgfmt -c --statistics --verbose -o nl.gmo nl.po
+ja.po: 200 translated messages, 18 fuzzy translations, 255 untranslated messages.
+lt.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
 nb.po: 7 translated messages, 5 fuzzy translations, 461 untranslated messages.
 cd ../../po && rm -f pl.gmo && /usr/bin/msgfmt -c --statistics --verbose -o pl.gmo pl.po
-nl.po: 261 translated messages, 21 fuzzy translations, 191 untranslated messages.
 cd ../../po && rm -f pt.gmo && /usr/bin/msgfmt -c --statistics --verbose -o pt.gmo pt.po
 cd ../../po && rm -f pt_BR.gmo && /usr/bin/msgfmt -c --statistics --verbose -o pt_BR.gmo pt_BR.po
-pl.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
+nl.po: 261 translated messages, 21 fuzzy translations, 191 untranslated messages.
+cd ../../po && rm -f ru.gmo && /usr/bin/msgfmt -c --statistics --verbose -o ru.gmo ru.po
 pt.po: 172 translated messages, 12 fuzzy translations, 289 untranslated messages.
+pl.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
 pt_BR.po: 237 translated messages, 18 fuzzy translations, 218 untranslated messages.
-cd ../../po && rm -f ru.gmo && /usr/bin/msgfmt -c --statistics --verbose -o ru.gmo ru.po
-cd ../../po && rm -f sv.gmo && /usr/bin/msgfmt -c --statistics --verbose -o sv.gmo sv.po
 cd ../../po && rm -f ta.gmo && /usr/bin/msgfmt -c --statistics --verbose -o ta.gmo ta.po
-ta.po: 1 translated message, 472 untranslated messages.
-ru.po: 46 translated messages, 8 fuzzy translations, 419 untranslated messages.
-sv.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
+cd ../../po && rm -f sv.gmo && /usr/bin/msgfmt -c --statistics --verbose -o sv.gmo sv.po
 cd ../../po && rm -f tr.gmo && /usr/bin/msgfmt -c --statistics --verbose -o tr.gmo tr.po
+ru.po: 46 translated messages, 8 fuzzy translations, 419 untranslated messages.
 cd ../../po && rm -f uk.gmo && /usr/bin/msgfmt -c --statistics --verbose -o uk.gmo uk.po
-cd ../../po && rm -f zh_CN.gmo && /usr/bin/msgfmt -c --statistics --verbose -o zh_CN.gmo zh_CN.po
+ta.po: 1 translated message, 472 untranslated messages.
 tr.po: 11 translated messages, 1 fuzzy translation, 461 untranslated messages.
-zh_CN.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
-uk.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
+sv.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
+cd ../../po && rm -f zh_CN.gmo && /usr/bin/msgfmt -c --statistics --verbose -o zh_CN.gmo zh_CN.po
 cd ../../po && rm -f zh_TW.gmo && /usr/bin/msgfmt -c --statistics --verbose -o zh_TW.gmo zh_TW.po
+uk.po: 414 translated messages, 21 fuzzy translations, 38 untranslated messages.
+zh_CN.po: 190 translated messages, 18 fuzzy translations, 265 untranslated messages.
 zh_TW.po: 105 translated messages, 11 fuzzy translations, 357 untranslated messages.
 make[3]: Leaving directory '/build/certmonger-0.79.13/build/po'
 touch stamp-po
@@ -1190,6 +1225,7 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o getcert-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-cadata.o `test -f 'cadata.c' || echo '../../src/'`cadata.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-casave.o `test -f 'casave.c' || echo '../../src/'`casave.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-canalyze.o `test -f 'canalyze.c' || echo '../../src/'`canalyze.c
 ../../src/cadata.c: In function 'fetch':
 ../../src/cadata.c:78:62: warning: unused parameter 'entry' [-Wunused-parameter]
    78 | fetch(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry, void *data)
@@ -1209,6 +1245,20 @@
 ../../src/getcert.c:304:48: warning: unused parameter 'mode' [-Wunused-parameter]
   304 | prep_bus(enum cm_tdbus_type which, const char *mode,
       |                                    ~~~~~~~~~~~~^~~~
+../../src/canalyze.c: In function 'cm_ca_analyze_certs_main':
+../../src/canalyze.c:108:28: warning: unused parameter 'e' [-Wunused-parameter]
+  108 |     struct cm_store_entry *e, void *data)
+      |     ~~~~~~~~~~~~~~~~~~~~~~~^
+../../src/canalyze.c:108:37: warning: unused parameter 'data' [-Wunused-parameter]
+  108 |     struct cm_store_entry *e, void *data)
+      |                               ~~~~~~^~~~
+../../src/canalyze.c: In function 'cm_ca_analyze_encryption_certs_main':
+../../src/canalyze.c:176:32: warning: unused parameter 'e' [-Wunused-parameter]
+  176 |         struct cm_store_entry *e, void *data)
+      |         ~~~~~~~~~~~~~~~~~~~~~~~^
+../../src/canalyze.c:176:41: warning: unused parameter 'data' [-Wunused-parameter]
+  176 |         struct cm_store_entry *e, void *data)
+      |                                   ~~~~~~^~~~
 ../../src/casave.c: In function 'cm_casave_main_n':
 ../../src/casave.c:93:11: warning: unused variable 'items' [-Wunused-variable]
    93 |  SECItem *items[2];
@@ -1230,21 +1280,6 @@
 ../../src/casave.c:408:29: warning: unused parameter 'parent' [-Wunused-parameter]
   408 | build_locations_lists(void *parent, struct cm_casave_state *state,
       |                       ~~~~~~^~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-canalyze.o `test -f 'canalyze.c' || echo '../../src/'`canalyze.c
-../../src/canalyze.c: In function 'cm_ca_analyze_certs_main':
-../../src/canalyze.c:108:28: warning: unused parameter 'e' [-Wunused-parameter]
-  108 |     struct cm_store_entry *e, void *data)
-      |     ~~~~~~~~~~~~~~~~~~~~~~~^
-../../src/canalyze.c:108:37: warning: unused parameter 'data' [-Wunused-parameter]
-  108 |     struct cm_store_entry *e, void *data)
-      |                               ~~~~~~^~~~
-../../src/canalyze.c: In function 'cm_ca_analyze_encryption_certs_main':
-../../src/canalyze.c:176:32: warning: unused parameter 'e' [-Wunused-parameter]
-  176 |         struct cm_store_entry *e, void *data)
-      |         ~~~~~~~~~~~~~~~~~~~~~~~^
-../../src/canalyze.c:176:41: warning: unused parameter 'data' [-Wunused-parameter]
-  176 |         struct cm_store_entry *e, void *data)
-      |                                   ~~~~~~^~~~
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certext.o `test -f 'certext.c' || echo '../../src/'`certext.c
 ../../src/certext.c: In function 'cm_certext_build_bitstring':
 ../../src/certext.c:322:51: warning: unused parameter 'entry' [-Wunused-parameter]
@@ -1324,6 +1359,7 @@
       |                                                     ~~~~~~~~~~~~~^~~~~
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certread.o `test -f 'certread.c' || echo '../../src/'`certread.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certread-n.o `test -f 'certread-n.c' || echo '../../src/'`certread-n.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certsave.o `test -f 'certsave.c' || echo '../../src/'`certsave.c
 ../../src/certread-n.c: In function 'cm_certread_n_main':
 ../../src/certread-n.c:68:15: warning: unused variable 'arena' [-Wunused-variable]
    68 |  PLArenaPool *arena;
@@ -1331,6 +1367,7 @@
 ../../src/certread-n.c:62:48: warning: unused parameter 'ca' [-Wunused-parameter]
    62 | cm_certread_n_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
       |                            ~~~~~~~~~~~~~~~~~~~~^~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certsave-n.o `test -f 'certsave-n.c' || echo '../../src/'`certsave-n.c
 ../../src/certread-n.c:255:4: warning: 'token' may be used uninitialized in this function [-Wmaybe-uninitialized]
   255 |    cm_log(0, "PIN was not needed to auth to token "
       |    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -1338,8 +1375,6 @@
       |           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   257 |           "Treating this as an error.\n", token);
       |           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certsave.o `test -f 'certsave.c' || echo '../../src/'`certsave.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-certsave-n.o `test -f 'certsave-n.c' || echo '../../src/'`certsave-n.c
 ../../src/certsave-n.c: In function 'cm_certsave_n_main':
 ../../src/certsave-n.c:87:24: warning: unused parameter 'fd' [-Wunused-parameter]
    87 | cm_certsave_n_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
@@ -1415,6 +1450,8 @@
       |                                             ~~~~~~~~~~~~~~~~~~~~~~~^
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-csrgen.o `test -f 'csrgen.c' || echo '../../src/'`csrgen.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-csrgen-n.o `test -f 'csrgen-n.c' || echo '../../src/'`csrgen-n.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-env-shared.o `test -f 'env-shared.c' || echo '../../src/'`env-shared.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-hook.o `test -f 'hook.c' || echo '../../src/'`hook.c
 ../../src/csrgen-n.c: In function 'cm_csrgen_n_main':
 ../../src/csrgen-n.c:238:46: warning: unused parameter 'ca' [-Wunused-parameter]
   238 | cm_csrgen_n_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
@@ -1422,8 +1459,6 @@
 ../../src/csrgen-n.c:239:10: warning: unused parameter 'userdata' [-Wunused-parameter]
   239 |    void *userdata)
       |    ~~~~~~^~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-env-shared.o `test -f 'env-shared.c' || echo '../../src/'`env-shared.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-hook.o `test -f 'hook.c' || echo '../../src/'`hook.c
 ../../src/hook.c: In function 'cm_hook_main':
 ../../src/hook.c:62:42: warning: unused parameter 'ca' [-Wunused-parameter]
    62 | cm_hook_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
@@ -1436,7 +1471,6 @@
   189 |    if ((cur->uid == l) &&
       |                  ^~
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-iterate.o `test -f 'iterate.c' || echo '../../src/'`iterate.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-json.o `test -f 'json.c' || echo '../../src/'`json.c
 ../../src/iterate.c: In function 'cm_waitfor_readable_fd':
 ../../src/iterate.c:294:2: warning: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Wrestrict]
   294 |  if (select(fd + 1, fdset, NULL, fdset, (delay >= 0) ? &tv : NULL) < 0) {
@@ -1445,6 +1479,7 @@
 ../../src/iterate.c:591:34: warning: comparison of integer expressions of different signedness: 'unsigned int' and 'long int' [-Wsign-compare]
   591 |   if (entry->cm_key_issued_count >= i) {
       |                                  ^~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-json.o `test -f 'json.c' || echo '../../src/'`json.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-keygen.o `test -f 'keygen.c' || echo '../../src/'`keygen.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-keygen-n.o `test -f 'keygen-n.c' || echo '../../src/'`keygen-n.c
 ../../src/keygen-n.c: In function 'cm_keygen_n_main':
@@ -1455,11 +1490,11 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-keyiread-n.o `test -f 'keyiread-n.c' || echo '../../src/'`keyiread-n.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-kudict.o `test -f 'kudict.c' || echo '../../src/'`kudict.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-log.o `test -f 'log.c' || echo '../../src/'`log.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-netlink.o `test -f 'netlink.c' || echo '../../src/'`netlink.c
 ../../src/keyiread-n.c: In function 'cm_keyiread_n_main':
 ../../src/keyiread-n.c:486:48: warning: unused parameter 'ca' [-Wunused-parameter]
   486 | cm_keyiread_n_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
       |                            ~~~~~~~~~~~~~~~~~~~~^~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-netlink.o `test -f 'netlink.c' || echo '../../src/'`netlink.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-notify.o `test -f 'notify.c' || echo '../../src/'`notify.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-oiddict.o `test -f 'oiddict.c' || echo '../../src/'`oiddict.c
 ../../src/notify.c: In function 'cm_notify_main':
@@ -1472,14 +1507,18 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-pin.o `test -f 'pin.c' || echo '../../src/'`pin.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-prefs.o `test -f 'prefs.c' || echo '../../src/'`prefs.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-prefs-n.o `test -f 'prefs-n.c' || echo '../../src/'`prefs-n.c
-../../src/prefs-n.c: In function 'cm_prefs_nss_sig_alg':
 ../../src/pin.c: In function 'cm_pin_read_for_key_ossl_cb':
-../../src/prefs-n.c:33:3: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
-   33 |   switch (cm_prefs_preferred_digest()) {
-      |   ^~~~~~
 ../../src/pin.c:118:54: warning: unused parameter 'rwflag' [-Wunused-parameter]
   118 | cm_pin_read_for_key_ossl_cb(char *buf, int size, int rwflag, void *u)
       |                                                  ~~~~^~~~~~
+../../src/pin.c: In function 'cm_pin_nss_cb':
+../../src/pin.c:149:29: warning: unused parameter 'slot' [-Wunused-parameter]
+  149 | cm_pin_nss_cb(PK11SlotInfo *slot, PRBool retry, void *arg,
+      |               ~~~~~~~~~~~~~~^~~~
+../../src/prefs-n.c: In function 'cm_prefs_nss_sig_alg':
+../../src/prefs-n.c:33:3: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
+   33 |   switch (cm_prefs_preferred_digest()) {
+      |   ^~~~~~
 ../../src/prefs-n.c:53:3: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
    53 |   switch (cm_prefs_preferred_digest()) {
       |   ^~~~~~
@@ -1489,10 +1528,6 @@
 ../../src/prefs-n.c:91:3: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
    91 |   switch (cm_prefs_preferred_digest()) {
       |   ^~~~~~
-../../src/pin.c: In function 'cm_pin_nss_cb':
-../../src/pin.c:149:29: warning: unused parameter 'slot' [-Wunused-parameter]
-  149 | cm_pin_nss_cb(PK11SlotInfo *slot, PRBool retry, void *arg,
-      |               ~~~~~~~~~~~~~~^~~~
 ../../src/prefs-n.c: In function 'cm_prefs_nss_dig_alg':
 ../../src/prefs-n.c:117:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
   117 |  switch (cm_prefs_preferred_digest()) {
@@ -1577,18 +1612,6 @@
 ../../src/tdbush.c:320:28: warning: unused parameter 'ci' [-Wunused-parameter]
   320 |     struct cm_client_info *ci, struct cm_context *ctx)
       |     ~~~~~~~~~~~~~~~~~~~~~~~^~
-../../src/tdbusm.c: In function 'cm_tdbusm_get_b':
-../../src/tdbusm.c:90:41: warning: unused parameter 'parent' [-Wunused-parameter]
-   90 | cm_tdbusm_get_b(DBusMessage *msg, void *parent, dbus_bool_t *b)
-      |                                   ~~~~~~^~~~~~
-../../src/tdbusm.c: In function 'cm_tdbusm_get_n':
-../../src/tdbusm.c:108:41: warning: unused parameter 'parent' [-Wunused-parameter]
-  108 | cm_tdbusm_get_n(DBusMessage *msg, void *parent, long *n)
-      |                                   ~~~~~~^~~~~~
-../../src/tdbusm.c: In function 'cm_tdbusm_get_d_value':
-../../src/tdbusm.c:1015:52: warning: unused parameter 'parent' [-Wunused-parameter]
- 1015 | cm_tdbusm_get_d_value(DBusMessageIter *item, void *parent,
-      |                                              ~~~~~~^~~~~~
 ../../src/tdbush.c: In function 'base_find_request_by_nickname':
 ../../src/tdbush.c:1660:33: warning: unused parameter 'ci' [-Wunused-parameter]
  1660 |          struct cm_client_info *ci, struct cm_context *ctx)
@@ -1613,19 +1636,12 @@
  1820 |         struct cm_client_info *ci, struct cm_context *ctx)
       |                                    ~~~~~~~~~~~~~~~~~~~^~~
 ../../src/tdbush.c: In function 'base_get_supported_key_and_cert_storage':
-../../src/tdbusm.c: In function 'cm_tdbusm_hint':
 ../../src/tdbush.c:1846:29: warning: unused parameter 'ci' [-Wunused-parameter]
  1846 |      struct cm_client_info *ci, struct cm_context *ctx)
       |      ~~~~~~~~~~~~~~~~~~~~~~~^~
-../../src/tdbusm.c:2149:22: warning: unused parameter 'parent' [-Wunused-parameter]
- 2149 | cm_tdbusm_hint(void *parent, const char *error, const char *message)
-      |                ~~~~~~^~~~~~
 ../../src/tdbush.c:1846:52: warning: unused parameter 'ctx' [-Wunused-parameter]
  1846 |      struct cm_client_info *ci, struct cm_context *ctx)
       |                                 ~~~~~~~~~~~~~~~~~~~^~~
-../../src/tdbusm.c:2149:61: warning: unused parameter 'message' [-Wunused-parameter]
- 2149 | cm_tdbusm_hint(void *parent, const char *error, const char *message)
-      |                                                 ~~~~~~~~~~~~^~~~~~~
 ../../src/tdbush.c: In function 'base_remove_known_ca':
 ../../src/tdbush.c:1885:31: warning: unused parameter 'ci' [-Wunused-parameter]
  1885 |        struct cm_client_info *ci, struct cm_context *ctx)
@@ -1754,9 +1770,17 @@
  2904 |          struct cm_client_info *ci, struct cm_context *ctx)
       |          ~~~~~~~~~~~~~~~~~~~~~~~^~
 ../../src/tdbush.c: In function 'request_get_monitoring':
+../../src/tdbusm.c: In function 'cm_tdbusm_get_b':
+../../src/tdbusm.c:90:41: warning: unused parameter 'parent' [-Wunused-parameter]
+   90 | cm_tdbusm_get_b(DBusMessage *msg, void *parent, dbus_bool_t *b)
+      |                                   ~~~~~~^~~~~~
 ../../src/tdbush.c:2950:33: warning: unused parameter 'ci' [-Wunused-parameter]
  2950 |          struct cm_client_info *ci, struct cm_context *ctx)
       |          ~~~~~~~~~~~~~~~~~~~~~~~^~
+../../src/tdbusm.c: In function 'cm_tdbusm_get_n':
+../../src/tdbusm.c:108:41: warning: unused parameter 'parent' [-Wunused-parameter]
+  108 | cm_tdbusm_get_n(DBusMessage *msg, void *parent, long *n)
+      |                                   ~~~~~~^~~~~~
 ../../src/tdbush.c: In function 'request_get_notification_info':
 ../../src/tdbush.c:2972:33: warning: unused parameter 'ci' [-Wunused-parameter]
  2972 |          struct cm_client_info *ci, struct cm_context *ctx)
@@ -1781,7 +1805,19 @@
 ../../src/tdbush.c:3138:30: warning: unused parameter 'ci' [-Wunused-parameter]
  3138 |       struct cm_client_info *ci, struct cm_context *ctx)
       |       ~~~~~~~~~~~~~~~~~~~~~~~^~
+../../src/tdbusm.c: In function 'cm_tdbusm_get_d_value':
+../../src/tdbusm.c:1015:52: warning: unused parameter 'parent' [-Wunused-parameter]
+ 1015 | cm_tdbusm_get_d_value(DBusMessageIter *item, void *parent,
+      |                                              ~~~~~~^~~~~~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-util.o `test -f 'util.c' || echo '../../src/'`util.c
+../../src/tdbusm.c: In function 'cm_tdbusm_hint':
+../../src/tdbusm.c:2149:22: warning: unused parameter 'parent' [-Wunused-parameter]
+ 2149 | cm_tdbusm_hint(void *parent, const char *error, const char *message)
+      |                ~~~~~~^~~~~~
 ../../src/tdbush.c: In function 'request_resubmit':
+../../src/tdbusm.c:2149:61: warning: unused parameter 'message' [-Wunused-parameter]
+ 2149 | cm_tdbusm_hint(void *parent, const char *error, const char *message)
+      |                                                 ~~~~~~~~~~~~^~~~~~~
 ../../src/tdbush.c:3701:27: warning: unused parameter 'ci' [-Wunused-parameter]
  3701 |    struct cm_client_info *ci, struct cm_context *ctx)
       |    ~~~~~~~~~~~~~~~~~~~~~~~^~
@@ -2119,6 +2155,7 @@
 ../../src/tdbush.c:6347:28: warning: unused parameter 'new_ca' [-Wunused-parameter]
  6347 |        struct cm_store_ca *new_ca)
       |        ~~~~~~~~~~~~~~~~~~~~^~~~~~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-util-m.o `test -f 'util-m.c' || echo '../../src/'`util-m.c
 ../../src/tdbush.c: In function 'cm_tdbush_handle_method_return':
 ../../src/tdbush.c:8136:30: warning: unused parameter 'bus' [-Wunused-parameter]
  8136 |           enum cm_tdbus_type bus, struct cm_context *ctx)
@@ -2127,8 +2164,6 @@
 ../../src/tdbush.c:3696:1: warning: control reaches end of non-void function [-Wreturn-type]
  3696 | }
       | ^
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-util.o `test -f 'util.c' || echo '../../src/'`util.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-util-m.o `test -f 'util-m.c' || echo '../../src/'`util-m.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_a-util-n.o `test -f 'util-n.c' || echo '../../src/'`util-n.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-certread-o.o `test -f 'certread-o.c' || echo '../../src/'`certread-o.c
 ../../src/certread-o.c: In function 'cm_certread_o_main':
@@ -2174,6 +2209,7 @@
       |           ~~~~~~~~~~~~~~~~~~~~~~~~~~
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-keygen-o.o `test -f 'keygen-o.c' || echo '../../src/'`keygen-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-keyiread-o.o `test -f 'keyiread-o.c' || echo '../../src/'`keyiread-o.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-pkcs7.o `test -f 'pkcs7.c' || echo '../../src/'`pkcs7.c
 ../../src/keygen-o.c: In function 'cm_keygen_o_main':
 ../../src/keygen-o.c:96:46: warning: unused parameter 'ca' [-Wunused-parameter]
    96 | cm_keygen_o_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
@@ -2188,17 +2224,6 @@
 ../../src/keyiread-o.c:56:12: warning: unused parameter 'userdata' [-Wunused-parameter]
    56 |      void *userdata)
       |      ~~~~~~^~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-pkcs7.o `test -f 'pkcs7.c' || echo '../../src/'`pkcs7.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-prefs-o.o `test -f 'prefs-o.c' || echo '../../src/'`prefs-o.c
-../../src/prefs-o.c: In function 'cm_prefs_ossl_hash_by_pref':
-../../src/prefs-o.c:39:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
-   39 |  switch (digest) {
-      |  ^~~~~~
-../../src/prefs-o.c: In function 'cm_prefs_ossl_cipher_by_pref':
-../../src/prefs-o.c:68:2: warning: enumeration value 'cm_prefs_nocipher' not handled in switch [-Wswitch]
-   68 |  switch (cipher) {
-      |  ^~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-scep-o.o `test -f 'scep-o.c' || echo '../../src/'`scep-o.c
 ../../src/pkcs7.c: In function 'bettertop':
 ../../src/pkcs7.c:119:17: warning: unused parameter 'candidate' [-Wunused-parameter]
   119 | bettertop(X509 *candidate, X509 *current, unsigned int flags)
@@ -2216,28 +2241,18 @@
 ../../src/pkcs7.c:933:11: warning: unused variable 'buf' [-Wunused-variable]
   933 |  char *s, buf[LINE_MAX], *p, *q;
       |           ^~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-scepgen-o.o `test -f 'scepgen-o.c' || echo '../../src/'`scepgen-o.c
-../../src/scepgen-o.c: In function 'cert_from_pem':
-../../src/scepgen-o.c:122:49: warning: unused parameter 'entry' [-Wunused-parameter]
-  122 | cert_from_pem(char *pem, struct cm_store_entry *entry)
-      |                          ~~~~~~~~~~~~~~~~~~~~~~~^~~~~
-../../src/scepgen-o.c: In function 'build_pkimessage':
-../../src/scepgen-o.c:321:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
-  321 |  switch (pref_digest) {
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-prefs-o.o `test -f 'prefs-o.c' || echo '../../src/'`prefs-o.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-scep-o.o `test -f 'scep-o.c' || echo '../../src/'`scep-o.c
+../../src/prefs-o.c: In function 'cm_prefs_ossl_hash_by_pref':
+../../src/prefs-o.c:39:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
+   39 |  switch (digest) {
       |  ^~~~~~
-../../src/scepgen-o.c: In function 'cm_scepgen_o_main':
-../../src/scepgen-o.c:716:11: warning: unused parameter 'userdata' [-Wunused-parameter]
-  716 |     void *userdata)
-      |     ~~~~~~^~~~~~~~
+../../src/prefs-o.c: In function 'cm_prefs_ossl_cipher_by_pref':
+../../src/prefs-o.c:68:2: warning: enumeration value 'cm_prefs_nocipher' not handled in switch [-Wswitch]
+   68 |  switch (cipher) {
+      |  ^~~~~~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-scepgen-o.o `test -f 'scepgen-o.c' || echo '../../src/'`scepgen-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-submit-so.o `test -f 'submit-so.c' || echo '../../src/'`submit-so.c
-../../src/scepgen-o.c:746:4: warning: '%s' directive argument is null [-Wformat-overflow=]
-  746 |    cm_log(0, "Error opening key file \"%s\" "
-      |    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-  747 |           "for reading: %s.\n",
-      |           ~~~~~~~~~~~~~~~~~~~~~
-  748 |           filename, strerror(errno));
-      |           ~~~~~~~~~~~~~~~~~~~~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-submit-o.o `test -f 'submit-o.c' || echo '../../src/'`submit-o.c
 ../../src/submit-so.c: In function 'cm_submit_so_main':
 ../../src/submit-so.c:57:11: warning: unused parameter 'userdata' [-Wunused-parameter]
    57 |     void *userdata)
@@ -2262,6 +2277,18 @@
 ../../src/submit-so.c:237:50: warning: unused parameter 'state' [-Wunused-parameter]
   237 | cm_submit_so_unsupported(struct cm_submit_state *state)
       |                          ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
+../../src/scepgen-o.c: In function 'cert_from_pem':
+../../src/scepgen-o.c:122:49: warning: unused parameter 'entry' [-Wunused-parameter]
+  122 | cert_from_pem(char *pem, struct cm_store_entry *entry)
+      |                          ~~~~~~~~~~~~~~~~~~~~~~~^~~~~
+../../src/scepgen-o.c: In function 'build_pkimessage':
+../../src/scepgen-o.c:321:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
+  321 |  switch (pref_digest) {
+      |  ^~~~~~
+../../src/scepgen-o.c: In function 'cm_scepgen_o_main':
+../../src/scepgen-o.c:716:11: warning: unused parameter 'userdata' [-Wunused-parameter]
+  716 |     void *userdata)
+      |     ~~~~~~^~~~~~~~
 ../../src/submit-so.c: In function 'cm_submit_so_main':
 ../../src/submit-so.c:84:4: warning: '%s' directive argument is null [-Wformat-overflow=]
    84 |    cm_log(1, "Error reading private key from "
@@ -2273,6 +2300,7 @@
 ../../src/submit-so.c:85:14: note: format string is defined here
    85 |           "\"%s\": %s.\n",
       |              ^~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-submit-o.o `test -f 'submit-o.c' || echo '../../src/'`submit-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libcm_o_a-util-o.o `test -f 'util-o.c' || echo '../../src/'`util-o.c
 In file included from ../../src/submit-o.c:36:
 /usr/include/nss/certt.h:562: warning: "KU_DIGITAL_SIGNATURE" redefined
@@ -2338,9 +2366,18 @@
 /usr/include/openssl/x509v3.h:378: note: this is the location of the previous definition
   378 | # define KU_ENCIPHER_ONLY        0x0001
       | 
+../../src/scepgen-o.c:746:4: warning: '%s' directive argument is null [-Wformat-overflow=]
+  746 |    cm_log(0, "Error opening key file \"%s\" "
+      |    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+  747 |           "for reading: %s.\n",
+      |           ~~~~~~~~~~~~~~~~~~~~~
+  748 |           filename, strerror(errno));
+      |           ~~~~~~~~~~~~~~~~~~~~~~~~~~
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_getcert-ipa-getcert.o `test -f 'ipa-getcert.c' || echo '../../src/'`ipa-getcert.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_getcert-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o selfsign_getcert-selfsign-getcert.o `test -f 'selfsign-getcert.c' || echo '../../src/'`selfsign-getcert.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o selfsign_getcert-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_getcert-local-getcert.o `test -f 'local-getcert.c' || echo '../../src/'`local-getcert.c
 In file included from ../../src/ipa-getcert.c:3:
 ../../src/getcert.c: In function 'prep_bus':
 ../../src/getcert.c:304:48: warning: unused parameter 'mode' [-Wunused-parameter]
@@ -2351,8 +2388,6 @@
 ../../src/getcert.c:304:48: warning: unused parameter 'mode' [-Wunused-parameter]
   304 | prep_bus(enum cm_tdbus_type which, const char *mode,
       |                                    ~~~~~~~~~~~~^~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o selfsign_getcert-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_getcert-local-getcert.o `test -f 'local-getcert.c' || echo '../../src/'`local-getcert.c
 In file included from ../../src/local-getcert.c:3:
 ../../src/getcert.c: In function 'prep_bus':
 ../../src/getcert.c:304:48: warning: unused parameter 'mode' [-Wunused-parameter]
@@ -2362,7 +2397,6 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o tdbusm-check.o ../../src/tdbusm-check.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o tm.o ../../src/tm.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o serial-check.o ../../src/serial-check.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o nl-check.o ../../src/nl-check.c
 ../../src/serial-check.c: In function 'main':
 ../../src/serial-check.c:26:10: warning: unused parameter 'argc' [-Wunused-parameter]
    26 | main(int argc, char **argv)
@@ -2370,6 +2404,7 @@
 ../../src/serial-check.c:26:23: warning: unused parameter 'argv' [-Wunused-parameter]
    26 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o nl-check.o ../../src/nl-check.c
 ../../src/nl-check.c: In function 'main':
 ../../src/nl-check.c:141:10: warning: unused parameter 'argc' [-Wunused-parameter]
   141 | main(int argc, char **argv)
@@ -2382,6 +2417,7 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_H_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_h-log.o `test -f 'log.c' || echo '../../src/'`log.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_H_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_h-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-submit-d.o `test -f 'submit-d.c' || echo '../../src/'`submit-d.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 ../../src/submit-d.c: In function 'cm_submit_d_check_result':
 ../../src/submit-d.c:488:12: warning: unused parameter 'error_code' [-Wunused-parameter]
   488 |     char **error_code, char **error_reason,
@@ -2441,8 +2477,8 @@
 ../../src/submit-d.c:854:18: warning: unused parameter 'can_agent' [-Wunused-parameter]
   854 |      dbus_bool_t can_agent, char **out, char **err)
       |      ~~~~~~~~~~~~^~~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-log.o `test -f 'log.c' || echo '../../src/'`log.c
 ../../src/submit-u.c: In function 'cm_submit_princ_realm_data':
 ../../src/submit-u.c:244:41: warning: unused parameter 'ctx' [-Wunused-parameter]
   244 | cm_submit_princ_realm_data(krb5_context ctx, krb5_principal princ)
@@ -2451,14 +2487,13 @@
 ../../src/submit-u.c:254:40: warning: unused parameter 'ctx' [-Wunused-parameter]
   254 | cm_submit_princ_realm_len(krb5_context ctx, krb5_principal princ)
       |                           ~~~~~~~~~~~~~^~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-log.o `test -f 'log.c' || echo '../../src/'`log.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o submit_d-util-m.o `test -f 'util-m.c' || echo '../../src/'`util-m.c
 rm -f libcm-o.a
 ar cru libcm-o.a libcm_o_a-certread-o.o libcm_o_a-certsave-o.o libcm_o_a-csrgen-o.o libcm_o_a-keygen-o.o libcm_o_a-keyiread-o.o libcm_o_a-pkcs7.o libcm_o_a-prefs-o.o libcm_o_a-scep-o.o libcm_o_a-scepgen-o.o libcm_o_a-submit-so.o libcm_o_a-submit-o.o libcm_o_a-util-o.o 
 ar: `u' modifier ignored since `D' is the default (see `U')
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o main.o ../../src/main.c
 ranlib libcm-o.a
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o main.o ../../src/main.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o env-session.o ../../src/env-session.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_submit-ipa.o `test -f 'ipa.c' || echo '../../src/'`ipa.c
 ../../src/ipa.c: In function 'get_error_message':
@@ -2500,13 +2535,13 @@
 ../../src/ipa.c:1169:12: note: in expansion of macro '_'
  1169 |     printf(_("xmlrpc_uri is longer than %ld.\n"), sizeof(uri) - 2);
       |            ^
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_submit-srvloc.o `test -f 'srvloc.c' || echo '../../src/'`srvloc.c
 ../../src/ipa.c:1169:43: note: format string is defined here
  1169 |     printf(_("xmlrpc_uri is longer than %ld.\n"), sizeof(uri) - 2);
       |                                         ~~^
       |                                           |
       |                                           long int
       |                                         %d
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_submit-srvloc.o `test -f 'srvloc.c' || echo '../../src/'`srvloc.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_submit-store-gen.o `test -f 'store-gen.c' || echo '../../src/'`store-gen.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_submit-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ipa_submit-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
@@ -2524,6 +2559,10 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -DDOGTAG_IPA_RENEW_AGENT=1 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_ipa_renew_agent_submit-dogtag.o `test -f 'dogtag.c' || echo '../../src/'`dogtag.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -DDOGTAG_IPA_RENEW_AGENT=1 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_ipa_renew_agent_submit-submit-d.o `test -f 'submit-d.c' || echo '../../src/'`submit-d.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -DDOGTAG_IPA_RENEW_AGENT=1 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_ipa_renew_agent_submit-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
+../../src/dogtag.c: In function 'main':
+../../src/dogtag.c:124:21: warning: unused variable 'csre' [-Wunused-variable]
+  124 |  char *csr = NULL, *csre = NULL;
+      |                     ^~~~
 ../../src/submit-d.c: In function 'cm_submit_d_check_result':
 ../../src/submit-d.c:488:12: warning: unused parameter 'error_code' [-Wunused-parameter]
   488 |     char **error_code, char **error_reason,
@@ -2583,10 +2622,6 @@
 ../../src/submit-d.c:854:18: warning: unused parameter 'can_agent' [-Wunused-parameter]
   854 |      dbus_bool_t can_agent, char **out, char **err)
       |      ~~~~~~~~~~~~^~~~~~~~~
-../../src/dogtag.c: In function 'main':
-../../src/dogtag.c:124:21: warning: unused variable 'csre' [-Wunused-variable]
-  124 |  char *csr = NULL, *csre = NULL;
-      |                     ^~~~
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -DDOGTAG_IPA_RENEW_AGENT=1 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_ipa_renew_agent_submit-util-m.o `test -f 'util-m.c' || echo '../../src/'`util-m.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -DDOGTAG_IPA_RENEW_AGENT=1 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_ipa_renew_agent_submit-util-n.o `test -f 'util-n.c' || echo '../../src/'`util-n.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -DDOGTAG_IPA_RENEW_AGENT=1 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_ipa_renew_agent_submit-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
@@ -2611,6 +2646,7 @@
 ../../src/dogtag.c:124:21: warning: unused variable 'csre' [-Wunused-variable]
   124 |  char *csr = NULL, *csre = NULL;
       |                     ^~~~
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_submit-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 ../../src/submit-d.c: In function 'cm_submit_d_check_result':
 ../../src/submit-d.c:488:12: warning: unused parameter 'error_code' [-Wunused-parameter]
   488 |     char **error_code, char **error_reason,
@@ -2670,7 +2706,6 @@
 ../../src/submit-d.c:854:18: warning: unused parameter 'can_agent' [-Wunused-parameter]
   854 |      dbus_bool_t can_agent, char **out, char **err)
       |      ~~~~~~~~~~~~^~~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_submit-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_submit-util-m.o `test -f 'util-m.c' || echo '../../src/'`util-m.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_submit-util-n.o `test -f 'util-n.c' || echo '../../src/'`util-n.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_submit-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
@@ -2690,6 +2725,7 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dogtag_submit-env-system.o `test -f 'env-system.c' || echo '../../src/'`env-system.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-local.o `test -f 'local.c' || echo '../../src/'`local.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-store-gen.o `test -f 'store-gen.c' || echo '../../src/'`store-gen.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-submit-o.o `test -f 'submit-o.c' || echo '../../src/'`submit-o.c
 ../../src/local.c: In function 'set_ca_extensions':
 ../../src/local.c:74:25: warning: unused parameter 'parent' [-Wunused-parameter]
    74 | set_ca_extensions(void *parent, X509_REQ *req, EVP_PKEY *key)
@@ -2698,14 +2734,6 @@
 ../../src/local.c:347:4: warning: '%s' directive argument is null [-Wformat-overflow=]
   347 |    cm_log(1, "Error incrementing '%s'.\n", hexserial);
       |    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-submit-o.o `test -f 'submit-o.c' || echo '../../src/'`submit-o.c
-../../src/local.c: In function 'main':
-../../src/local.c:614:5: warning: '%s' directive argument is null [-Wformat-overflow=]
-  614 |     cm_log(1, "Error incrementing '%s'.\n",
-      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-  615 |            hexserial);
-      |            ~~~~~~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
 In file included from ../../src/submit-o.c:36:
 /usr/include/nss/certt.h:562: warning: "KU_DIGITAL_SIGNATURE" redefined
   562 | #define KU_DIGITAL_SIGNATURE (0x80) /* bit 0 */
@@ -2770,6 +2798,13 @@
 /usr/include/openssl/x509v3.h:378: note: this is the location of the previous definition
   378 | # define KU_ENCIPHER_ONLY        0x0001
       | 
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
+../../src/local.c: In function 'main':
+../../src/local.c:614:5: warning: '%s' directive argument is null [-Wformat-overflow=]
+  614 |     cm_log(1, "Error incrementing '%s'.\n",
+      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+  615 |            hexserial);
+      |            ~~~~~~~~~~
 ../../src/submit-u.c: In function 'cm_submit_princ_realm_data':
 ../../src/submit-u.c:244:41: warning: unused parameter 'ctx' [-Wunused-parameter]
   244 | cm_submit_princ_realm_data(krb5_context ctx, krb5_principal princ)
@@ -2785,6 +2820,7 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-prefs-o.o `test -f 'prefs-o.c' || echo '../../src/'`prefs-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-util.o `test -f 'util.c' || echo '../../src/'`util.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-util-o.o `test -f 'util-o.c' || echo '../../src/'`util-o.c
 ../../src/prefs-o.c: In function 'cm_prefs_ossl_hash_by_pref':
 ../../src/prefs-o.c:39:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
    39 |  switch (digest) {
@@ -2793,9 +2829,9 @@
 ../../src/prefs-o.c:68:2: warning: enumeration value 'cm_prefs_nocipher' not handled in switch [-Wswitch]
    68 |  switch (cipher) {
       |  ^~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-util-o.o `test -f 'util-o.c' || echo '../../src/'`util-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o local_submit-pin.o `test -f 'pin.c' || echo '../../src/'`pin.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-scep.o `test -f 'scep.c' || echo '../../src/'`scep.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 ../../src/pin.c: In function 'cm_pin_read_for_key_ossl_cb':
 ../../src/pin.c:118:54: warning: unused parameter 'rwflag' [-Wunused-parameter]
   118 | cm_pin_read_for_key_ossl_cb(char *buf, int size, int rwflag, void *u)
@@ -2812,7 +2848,6 @@
 /usr/include/stdlib.h:565:25: note: expected 'void *' but argument is of type 'const char *'
   565 | extern void free (void *__ptr) __THROW;
       |                   ~~~~~~^~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-submit-h.o `test -f 'submit-h.c' || echo '../../src/'`submit-h.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-util-m.o `test -f 'util-m.c' || echo '../../src/'`util-m.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-util-o.o `test -f 'util-o.c' || echo '../../src/'`util-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-submit-u.o `test -f 'submit-u.c' || echo '../../src/'`submit-u.c
@@ -2828,6 +2863,8 @@
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-log.o `test -f 'log.c' || echo '../../src/'`log.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-pkcs7.o `test -f 'pkcs7.c' || echo '../../src/'`pkcs7.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-store-gen.o `test -f 'store-gen.c' || echo '../../src/'`store-gen.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-prefs.o `test -f 'prefs.c' || echo '../../src/'`prefs.c
 ../../src/pkcs7.c: In function 'bettertop':
 ../../src/pkcs7.c:119:17: warning: unused parameter 'candidate' [-Wunused-parameter]
   119 | bettertop(X509 *candidate, X509 *current, unsigned int flags)
@@ -2845,11 +2882,10 @@
 ../../src/pkcs7.c:933:11: warning: unused variable 'buf' [-Wunused-variable]
   933 |  char *s, buf[LINE_MAX], *p, *q;
       |           ^~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-tm.o `test -f 'tm.c' || echo '../../src/'`tm.c
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-prefs.o `test -f 'prefs.c' || echo '../../src/'`prefs.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-prefs-o.o `test -f 'prefs-o.c' || echo '../../src/'`prefs-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-scep-o.o `test -f 'scep-o.c' || echo '../../src/'`scep-o.c
 gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scep_submit-env-system.o `test -f 'env-system.c' || echo '../../src/'`env-system.c
+gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o env-system.o ../../src/env-system.c
 ../../src/prefs-o.c: In function 'cm_prefs_ossl_hash_by_pref':
 ../../src/prefs-o.c:39:2: warning: enumeration value 'cm_prefs_nodigest' not handled in switch [-Wswitch]
    39 |  switch (digest) {
@@ -2858,13 +2894,12 @@
 ../../src/prefs-o.c:68:2: warning: enumeration value 'cm_prefs_nocipher' not handled in switch [-Wswitch]
    68 |  switch (cipher) {
       |  ^~~~~~
-gcc -DHAVE_CONFIG_H -I. -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o env-system.o ../../src/env-system.c
 rm -f libcm.a
 ar cru libcm.a libcm_a-cadata.o libcm_a-casave.o libcm_a-canalyze.o libcm_a-certext.o libcm_a-certread.o libcm_a-certread-n.o libcm_a-certsave.o libcm_a-certsave-n.o libcm_a-cm.o libcm_a-csrgen.o libcm_a-csrgen-n.o libcm_a-env-shared.o libcm_a-hook.o libcm_a-iterate.o libcm_a-json.o libcm_a-keygen.o libcm_a-keygen-n.o libcm_a-keyiread.o libcm_a-keyiread-n.o libcm_a-kudict.o libcm_a-log.o libcm_a-netlink.o libcm_a-notify.o libcm_a-oiddict.o libcm_a-pin.o libcm_a-prefs.o libcm_a-prefs-n.o libcm_a-scepgen.o libcm_a-scepgen-n.o libcm_a-store-files.o libcm_a-store-gen.o libcm_a-submit.o libcm_a-submit-e.o libcm_a-submit-n.o libcm_a-submit-sn.o libcm_a-submit-u.o libcm_a-subproc.o libcm_a-tdbus.o libcm_a-tdbush.o libcm_a-tdbusm.o libcm_a-util.o libcm_a-util-m.o libcm_a-util-n.o  libcm_o_a-certread-o.o libcm_o_a-certsave-o.o libcm_o_a-csrgen-o.o libcm_o_a-keygen-o.o libcm_o_a-keyiread-o.o libcm_o_a-pkcs7.o libcm_o_a-prefs-o.o libcm_o_a-scep-o.o libcm_o_a-scepgen-o.o libcm_o_a-submit-so.o libcm_o_a-submit-o.o libcm_o_a-util-o.o
 ar: `u' modifier ignored since `D' is the default (see `U')
+ranlib libcm.a
 gcc   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o toklist toklist-toklist.o -lnss3 -lnssutil3 -lsmime3 -lssl3 -lplds4 -lplc4 -lnspr4 -lpopt  
 gcc   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_H_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o submit-h submit_h-submit-h.o submit_h-log.o submit_h-tm.o -lcurl -lxml2 -ltalloc  -lpopt  
-ranlib libcm.a
 gcc   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/arm-linux-gnueabihf -I/usr/include/libxml2 -DCM_SUBMIT_D_MAIN -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o submit-d submit_d-submit-d.o submit_d-submit-h.o submit_d-submit-u.o submit_d-log.o submit_d-tm.o submit_d-util-m.o libcm-o.a -lcurl -lcrypto -lxml2 -ltalloc  -luuid  -lpopt  
 gcc   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o certmonger-session main.o env-session.o tm.o libcm.a -lcrypto -ldbus-1 -ltevent -ltalloc -lnss3 -lnssutil3 -lsmime3 -lssl3 -lplds4 -lplc4 -lnspr4 -L/usr/lib/arm-linux-gnueabihf/mit-krb5 -Wl,-z,relro -lkrb5 -lk5crypto -lcom_err -lidn2  -luuid -lpopt   -lldap  
 gcc   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/nss -I/usr/include/nspr -I/usr/include/arm-linux-gnueabihf  -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o ipa-submit ipa_submit-ipa.o ipa_submit-srvloc.o ipa_submit-store-gen.o ipa_submit-submit-h.o ipa_submit-submit-u.o ipa_submit-util.o ipa_submit-log.o ipa_submit-tm.o  -lldap  -L/usr/lib/arm-linux-gnueabihf/mit-krb5 -Wl,-z,relro -lkrb5 -lk5crypto -lcom_err -ltalloc  -lidn2 -lcrypto -luuid -lresolv  -lpopt  -lcurl -ljansson 
@@ -2910,6 +2945,7 @@
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o name2oid.o ../../../tests/tools/name2oid.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o iterate.o ../../../tests/tools/iterate.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o prefs.o ../../../tests/tools/prefs.c
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dates.o ../../../tests/tools/dates.c
 ../../../tests/tools/prefs.c: In function 'main':
 ../../../tests/tools/prefs.c:28:10: warning: unused parameter 'argc' [-Wunused-parameter]
    28 | main(int argc, char **argv)
@@ -2917,9 +2953,9 @@
 ../../../tests/tools/prefs.c:28:23: warning: unused parameter 'argv' [-Wunused-parameter]
    28 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dates.o ../../../tests/tools/dates.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o listnicks-listnicks.o `test -f 'listnicks.c' || echo '../../../tests/tools/'`listnicks.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o pem2base.o ../../../tests/tools/pem2base.c
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o base2pem.o ../../../tests/tools/base2pem.c
 ../../../tests/tools/pem2base.c: In function 'main':
 ../../../tests/tools/pem2base.c:33:10: warning: unused parameter 'argc' [-Wunused-parameter]
    33 | main(int argc, char **argv)
@@ -2927,10 +2963,10 @@
 ../../../tests/tools/pem2base.c:33:23: warning: unused parameter 'argv' [-Wunused-parameter]
    33 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o base2pem.o ../../../tests/tools/base2pem.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -I/usr/include/libxml2 -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o dparse-dparse.o `test -f 'dparse.c' || echo '../../../tests/tools/'`dparse.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o payload-payload.o `test -f 'payload.c' || echo '../../../tests/tools/'`payload.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o checksig-checksig.o `test -f 'checksig.c' || echo '../../../tests/tools/'`checksig.c
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o base64.o ../../../tests/tools/base64.c
 ../../../tests/tools/payload.c: In function 'main':
 ../../../tests/tools/payload.c:41:10: warning: unused parameter 'argc' [-Wunused-parameter]
    41 | main(int argc, char **argv)
@@ -2938,8 +2974,6 @@
 ../../../tests/tools/payload.c:41:23: warning: unused parameter 'argv' [-Wunused-parameter]
    41 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o base64.o ../../../tests/tools/base64.c
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o cadata.o ../../../tests/tools/cadata.c
 ../../../tests/tools/checksig.c: In function 'main':
 ../../../tests/tools/checksig.c:46:10: warning: unused parameter 'argc' [-Wunused-parameter]
    46 | main(int argc, char **argv)
@@ -2947,6 +2981,7 @@
 ../../../tests/tools/checksig.c:46:23: warning: unused parameter 'argv' [-Wunused-parameter]
    46 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o cadata.o ../../../tests/tools/cadata.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o citerate.o ../../../tests/tools/citerate.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o casave.o ../../../tests/tools/casave.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o hooks.o ../../../tests/tools/hooks.c
@@ -2968,6 +3003,7 @@
       |                    ~~~~~~~~~~~~~~~~~~~^~~
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o libexecdir.o ../../../tests/tools/libexecdir.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o canon.o ../../../tests/tools/canon.c
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o srv.o ../../../tests/tools/srv.c
 ../../../tests/tools/libexecdir.c: In function 'main':
 ../../../tests/tools/libexecdir.c:22:10: warning: unused parameter 'argc' [-Wunused-parameter]
    22 | main(int argc, char **argv)
@@ -2975,9 +3011,9 @@
 ../../../tests/tools/libexecdir.c:22:23: warning: unused parameter 'argv' [-Wunused-parameter]
    22 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o srv.o ../../../tests/tools/srv.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -I/usr/include/nss -I/usr/include/nspr -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o addcinfo-addcinfo.o `test -f 'addcinfo.c' || echo '../../../tests/tools/'`addcinfo.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o ls.o ../../../tests/tools/ls.c
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o json.o ../../../tests/tools/json.c
 ../../../tests/tools/addcinfo.c: In function 'main':
 ../../../tests/tools/addcinfo.c:64:10: warning: unused parameter 'argc' [-Wunused-parameter]
    64 | main(int argc, char **argv)
@@ -2985,9 +3021,7 @@
 ../../../tests/tools/addcinfo.c:64:23: warning: unused parameter 'argv' [-Wunused-parameter]
    64 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o json.o ../../../tests/tools/json.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o json-utf8.o ../../../tests/tools/json-utf8.c
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o printenv.o ../../../tests/tools/printenv.c
 ../../../tests/tools/json-utf8.c: In function 'main':
 ../../../tests/tools/json-utf8.c:35:10: warning: unused parameter 'argc' [-Wunused-parameter]
    35 | main(int argc, char **argv)
@@ -2995,8 +3029,10 @@
 ../../../tests/tools/json-utf8.c:35:23: warning: unused parameter 'argv' [-Wunused-parameter]
    35 | main(int argc, char **argv)
       |                ~~~~~~~^~~~
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o printenv.o ../../../tests/tools/printenv.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o fromfile-fromfile.o `test -f 'fromfile.c' || echo '../../../tests/tools/'`fromfile.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o pk7parse.o ../../../tests/tools/pk7parse.c
+gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o pk7env.o ../../../tests/tools/pk7env.c
 In file included from ../../../tests/tools/fromfile.c:28:
 ../../../tests/tools/../../src/submit-u.c: In function 'cm_submit_princ_realm_data':
 ../../../tests/tools/../../src/submit-u.c:244:41: warning: unused parameter 'ctx' [-Wunused-parameter]
@@ -3006,7 +3042,6 @@
 ../../../tests/tools/../../src/submit-u.c:254:40: warning: unused parameter 'ctx' [-Wunused-parameter]
   254 | cm_submit_princ_realm_len(krb5_context ctx, krb5_principal princ)
       |                           ~~~~~~~~~~~~~^~~
-gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o pk7env.o ../../../tests/tools/pk7env.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o scepgen.o ../../../tests/tools/scepgen.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o pk7verify.o ../../../tests/tools/pk7verify.c
 gcc -DHAVE_CONFIG_H -I. -I../../../tests/tools -I../../src   -Wdate-time -D_FORTIFY_SOURCE=2   -I/usr/include/dbus-1.0 -I/usr/lib/arm-linux-gnueabihf/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I../../src -I../../../src -g -O2 -fdebug-prefix-map=/build/certmonger-0.79.13=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC -c -o pk7decrypt.o ../../../tests/tools/pk7decrypt.c
@@ -3126,7 +3161,7 @@
    debian/rules override_dh_auto_install
 make[1]: Entering directory '/build/certmonger-0.79.13'
 dh_auto_install --destdir=debian/tmp
-	cd build && make -j3 install DESTDIR=/build/certmonger-0.79.13/debian/tmp AM_UPDATE_INFO_DIR=no
+	cd build && make -j4 install DESTDIR=/build/certmonger-0.79.13/debian/tmp AM_UPDATE_INFO_DIR=no
 make[2]: Entering directory '/build/certmonger-0.79.13/build'
 Making install in po
 make[3]: Entering directory '/build/certmonger-0.79.13/build/po'
@@ -3178,14 +3213,14 @@
   /usr/bin/install -c getcert ipa-getcert selfsign-getcert local-getcert '/build/certmonger-0.79.13/debian/tmp/usr/bin'
   /usr/bin/install -c certmonger-session ipa-submit dogtag-ipa-renew-agent-submit dogtag-submit local-submit scep-submit '/build/certmonger-0.79.13/debian/tmp/usr/lib/certmonger'
   /usr/bin/install -c certmonger '/build/certmonger-0.79.13/debian/tmp/usr/sbin'
- /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man5'
  /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man1'
+ /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man5'
  /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man8'
  /usr/bin/install -c -m 644 certmonger.conf.5 '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man5'
  /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/etc/certmonger'
+ /usr/bin/install -c -m 644 certmonger.8 certmonger-ipa-submit.8 certmonger-dogtag-ipa-renew-agent-submit.8 certmonger-local-submit.8 certmonger-dogtag-submit.8 certmonger-scep-submit.8 '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man8'
  /usr/bin/install -c -m 644 certmonger.conf '/build/certmonger-0.79.13/debian/tmp/etc/certmonger'
  /usr/bin/install -c -m 644 getcert.1 getcert-request.1 getcert-list.1 getcert-list-cas.1 getcert-start-tracking.1 getcert-stop-tracking.1 selfsign-getcert.1 ipa-getcert.1 getcert-resubmit.1 getcert-refresh.1 getcert-refresh-ca.1 local-getcert.1 getcert-status.1 getcert-add-ca.1 getcert-add-scep-ca.1 getcert-modify-ca.1 getcert-remove-ca.1 getcert-rekey.1 '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man1'
- /usr/bin/install -c -m 644 certmonger.8 certmonger-ipa-submit.8 certmonger-dogtag-ipa-renew-agent-submit.8 certmonger-local-submit.8 certmonger-dogtag-submit.8 certmonger-scep-submit.8 '/build/certmonger-0.79.13/debian/tmp/usr/share/man/man8'
 make  install-data-hook
 make[5]: Entering directory '/build/certmonger-0.79.13/build/src'
 chmod go-rwx /build/certmonger-0.79.13/debian/tmp/etc/certmonger/certmonger.conf
@@ -3200,8 +3235,8 @@
 make[4]: Entering directory '/build/certmonger-0.79.13/build/dbus'
 make[4]: Nothing to be done for 'install-exec-am'.
  /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/usr/share/dbus-1/services'
- /usr/bin/install -c -m 644 certmonger.service '/build/certmonger-0.79.13/debian/tmp/usr/share/dbus-1/services'
  /bin/mkdir -p '/build/certmonger-0.79.13/debian/tmp/etc/dbus-1/system.d'
+ /usr/bin/install -c -m 644 certmonger.service '/build/certmonger-0.79.13/debian/tmp/usr/share/dbus-1/services'
  /usr/bin/install -c -m 644 certmonger.conf '/build/certmonger-0.79.13/debian/tmp/etc/dbus-1/system.d'
 make[4]: Leaving directory '/build/certmonger-0.79.13/build/dbus'
 make[3]: Leaving directory '/build/certmonger-0.79.13/build/dbus'
@@ -3259,32 +3294,32 @@
    dh_perl -O--builddirectory=build/
    dh_link -O--builddirectory=build/
    dh_strip_nondeterminism -O--builddirectory=build/
-	Normalized debian/certmonger/usr/share/locale/fr/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/nb/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/zh_TW/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/pt_BR/LC_MESSAGES/certmonger.mo
 	Normalized debian/certmonger/usr/share/locale/lt/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/pt/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/ta/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/gu/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/it/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/cs_CZ/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/tr/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/hu/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/pl/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/ja/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/bg/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/zh_CN/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/ru/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/de/LC_MESSAGES/certmonger.mo
 	Normalized debian/certmonger/usr/share/locale/ca/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/es/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/eu/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/ru/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/id/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/pl/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/hu/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/nb/LC_MESSAGES/certmonger.mo
 	Normalized debian/certmonger/usr/share/locale/nl/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/cs_CZ/LC_MESSAGES/certmonger.mo
 	Normalized debian/certmonger/usr/share/locale/da/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/uk/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/id/LC_MESSAGES/certmonger.mo
-	Normalized debian/certmonger/usr/share/locale/pt_BR/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/eu/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/ja/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/tr/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/it/LC_MESSAGES/certmonger.mo
 	Normalized debian/certmonger/usr/share/locale/sv/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/zh_TW/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/gu/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/pt/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/bg/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/ta/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/uk/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/es/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/fr/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/de/LC_MESSAGES/certmonger.mo
+	Normalized debian/certmonger/usr/share/locale/zh_CN/LC_MESSAGES/certmonger.mo
    dh_compress -O--builddirectory=build/
    dh_fixperms -O--builddirectory=build/
    debian/rules override_dh_missing
@@ -3310,12 +3345,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/14036/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/14036/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/23771 and its subdirectories
-I: Current time: Fri Aug 20 11:23:37 -12 2021
-I: pbuilder-time-stamp: 1629501817
+I: removing directory /srv/workspace/pbuilder/14036 and its subdirectories
+I: Current time: Sat Aug 21 13:26:33 +14 2021
+I: pbuilder-time-stamp: 1629501993