go-kitesurf, it's there. See page 15 of PDF "15 Part 1: Hard Token (“Wallet”) Multiple key pairs and other credentials One, two and three factor uses All signed by one foundational key Part 2: Indoor Client Examples: MS Palladium ( renamed “ The Next-Generation Secure Computing Base For Windows”) Wave Systems’ Embassy Trust System TCPA Intel LaGrande Phoenix CmE “ Sandbox” software-only approaches Others? Quiet Enjoyment Infrastructure / Instigation #1 Quiet Enjoyment Infrastructure / Instigation #1 Copyright"