pub const CERT_SELECT_HARDWARE_ONLY: u32 = 64u32;