* Add make fmt CI check * Don't suppress patch output
- The OSS side of things to leverage managed keys from the PKI secrets engine