//usr/libexec/p11-kit/trust-extract-compat