A key held by a PKCS#11 (Cryptoki) module — hardware security modules, USB tokens and smartcards, on any platform.