Hi,
I think that the content of the hsm password argument should not be visible in the process table.
Step to reproduce :
1/ start the cosmian ksm with an proteccio hsm using the --hsm-{model,password,slot} and --hsm admin args.
2/ check the process table with ps auxww | grep hsm-password.
Expected :
The password should be not in the process table.
Fix :
Using an environment variable like : HSM_PASSWORD with CLIP.
Best Regards,