Modernizing federal PKI: From legacy liability to strategic asset