Add code for creating, configuring, and destroying KASP keys. When using the default policy, create one CSK, no rollover.