There's a [new API for PEM](https://openjdk.org/jeps/524) currently in preview, when the API goes final, we should do another multi-release jar leveraging that new API.