A new script has been added to restore a missing or corrupted subsystem user such that it has the correct certificate, the correct certificate mapping, and the correct membership to the Subsystem Group. A new Python library have been added to provide the script with the functionality to access the PKI configuration and database. A new CLI has also been added for troubleshooting. https://bugzilla.redhat.com/show_bug.cgi?id=1225589 -- Endi S. Dewata