I now load x.509 certificates to dedicated ESP32 partitions rather embedding into the code via COMPONENT_EMBED_TXTFILES; This helps decouple the code from provisioning the device with CA and client certificate+key; Still working on PKI to provision the certificates at flash time
