Investigate trust-extract-compat warning

p11-kit: format requires a purpose, specify it with --purpose; defaulting to 'server-auth'