with import <nixpkgs> {};
let
  pki = pkgs.callPackage ./lib/pki.nix {};
in
  pki.initca