case "$MODE" in
    commandline)
        add_option "copy-italc-keys" "`eval_gettext "copy iTalc keys to the chroot (none|public|all|auto)"`" "advanced" "true"
        # none:   don't copy any keys
        # public: copy /etc/italc/keys/public
        # all:    copy both /etc/italc/keys/public and /etc/italc/keys/private
        # auto:   copy the keys only if italc-client is installed on the chroot
        ;;

    configure)
        if [ -n "$option_copy_italc_keys_value" ]; then
            COPY_ITALC_KEYS="$option_copy_italc_keys_value"
        fi
        ;;

    finalization)
        copy_italc_public_keys() {
            [ -d /etc/italc/keys/public ] || return 0;
            mkdir -p "$ROOT/etc/italc/keys"
            cp -r /etc/italc/keys/public "$ROOT/etc/italc/keys"
            chroot "$ROOT" chown -R root:root /etc/italc/keys/public
            chroot "$ROOT" chmod 444 /etc/italc/keys/public/*/key || true
        }

        copy_italc_private_keys() {
            [ -d /etc/italc/keys/private ] || return 0;
            cp -r /etc/italc/keys/private "$ROOT/etc/italc/keys"
            chroot "$ROOT" chown -R root:admin /etc/italc/keys/private
            chroot "$ROOT" chmod 440 /etc/italc/keys/private/*/key || true
        }

        case "$COPY_ITALC_KEYS" in
            ""|none)
            ;;
            public)
                copy_italc_public_keys
            ;;
            all)
                copy_italc_public_keys
                copy_italc_private_keys
            ;;
            auto)
                if [ -n "$(chroot "$ROOT" dpkg-query -W -f '${Version}' italc-client 2>/dev/null)" ]; then
                    copy_italc_public_keys
                fi
                if [ -n "$(chroot "$ROOT" dpkg-query -W -f '${Version}' italc-master 2>/dev/null)" ]; then
                    copy_italc_private_keys
                fi
            ;;
            *)
                echo "WARNING: invalid option $option_copy_italc_keys_value passed to copy-italc-keys" >&2
            ;;
         esac
    ;;
esac
