KMS Support (async lookup of privateCert)

[juniorfoo]

Forgive me if I missed something but I don't see how to use this with a KMS. I was thinking of putting in a PR to support passing in a callback for privateCert to do the signing. Thoughts?

[markstos]

I presume you mean "Key Management System". A patch is welcome it make privateCert accept a key through a callback, as cert does.

The workaround is to generate the key and place it on the filesystem for passport-saml to find before it boots up.