Goal

As a developer running containers within a corporate environment, I want my UBI containers to include the p11kit-modules package so that my container does not need a bind mount to inherit TLS trust bundles from the host.

Acceptance criteria

• UBI containers include the p11kit-modules RPM package - ideally the "standard" and "minimal" variants. Omitting from the "micro" image is probably acceptable.
• Containers created with Podman and cri-o can inherit host trust sources using standard PKCS#11 mechanisms