flag.StringVar(&c.RootObject,"root-cert","pkcs11:id=7330;object=root-cert","PKCS #11 URI with object id and label to store the root certificate.")
flag.StringVar(&c.RootKeyObject,"root-key","pkcs11:id=7330;object=root-key","PKCS #11 URI with object id and label to store the root key.")
flag.StringVar(&c.RootSubject,"root-name","PKCS #11 Smallstep Root","Subject and Issuer of the root certificate.")
flag.StringVar(&c.CrtObject,"crt-cert","pkcs11:id=7331;object=intermediate-cert","PKCS #11 URI with object id and label to store the intermediate certificate.")
flag.StringVar(&c.CrtKeyObject,"crt-key","pkcs11:id=7331;object=intermediate-key","PKCS #11 URI with object id and label to store the intermediate certificate.")
flag.StringVar(&c.CrtSubject,"crt-name","PKCS #11 Smallstep Intermediate","Subject of the intermediate certificate.")
flag.StringVar(&c.SSHHostKeyObject,"ssh-host-key","pkcs11:id=7332;object=ssh-host-key","PKCS #11 URI with object id and label to store the key used to sign SSH host certificates.")
flag.StringVar(&c.SSHUserKeyObject,"ssh-user-key","pkcs11:id=7333;object=ssh-user-key","PKCS #11 URI with object id and label to store the key used to sign SSH user certificates.")
flag.BoolVar(&c.RootOnly,"root-only",false,"Store only only the root certificate and sign and intermediate.")