layout tweak PKI sample