Updated to support an environment variable named CACKEY_NO_EXTRA_CERTS to inhibit DoD certs from being presented