pki: Plugins to load may be defined via PKI_PLUGINS env variable