CurveZMQ is integrated, including config and utilities for keygen. We have zmq keygen commands in bx, and the preexisting conventional base85 key encoding, so these will drop right in for bx support as well. We can add self-signed tls certgen there also, once WolfSSL is factored into a base lib, since bx doesn't take the network dependency.