@Michael Harp: I think you can also get your organization to sign the CLA and then all members of the organization are automatically signed, so you don't have to individually sign it if you have concerns about personally signing the agreement? I'm not 100% clear on how that works but I remember having to deal with a request around that last year. For that particular FIPS piece, I've also created an internal ticket last week for the engineering team, pointing at your PR as some work already done, while they look into the FIPS issues with that module.