Implement TOFU-POP for TLS certs
Add user.digest processing