The PKCS11 proxy requires `test/test-ca.key.pem` in DER form. Rather than generating it when it doesn't exist in `test/entrypoint.sh` and adding it to the gitignore we've opted to check it in directly.