* add option for ingesting key-material via command-line
* run tests on 64-bit big-endian machines (e.g. sparc64)
* allow module-directory to be searchable
* extend tests on --safetynet option
* integrate with SELinux
* add 'mountable' flag?
* add 'verbose' option?
* key-cache for multiple operations?
* multiple devices in cmtab?
