security without obscurity: a guide to pki operations auerbach publications