Extend KeyResolver to include certificate resolution, add inline resolver.