External Account Binding is required for Zero SSL and Google Trust Services
Cf https://www.rfc-editor.org/rfc/rfc8555.html#section-7.3.4
krtab
