The issue is that the HSM itself has no input or output. Securely interfacing with those is not trivial.
Reply on news.ycombinator.com