NSSCryptoModuleSpec/Section 7: Cryptographic Key Management