Experimental version with HTML keygen interface. Unfortunately this won't work because there's no way of converting the Netscape signed public key and challenge input into a signed certificate request for input to MyProxy?.