Mudhra revoked 8 more certificate authorities after finding its Python script exposed RSA private keys to process memory during an HSM transfer.