When connecting to the iot-identity-service from a containerized environment libaziot-keys openssl engine is needed (someone will have to make sure the required unix domain sockets are available, too)
To get libaziot-keys one can just install aziot-identity-service, but it would be nice to have a package with only libaziot-keys, e.g. aziot-libaziot-keys to minimize container image contents.