unenroll keypress example.com --state_dir #TMPDIR#/statedir --global_trust_dir /usr/local/share/ca-certificates
KRB5CCNAME=#TMPDIR#/rundir/krb5cc/keypress
PYTHONPATH=:#TMPDIR#/sharedir/python
