Generate custom x509 certificate in Okta

Generating a custom x509 certificate for an Okta app over the API, capturing the kid, and injecting it back into the app.

AWS KMS - two liners

Two-line AWS CLI recipes for encrypting and decrypting with KMS, for both binary and base64 ciphertext.