Usage: cmstest [-q(uiet)] [-r(efblobs)] [-s signer1] [-S signer2] [-k keychain] [-a anchorFile]

By default this test expects to see two identities, with email addresses of 
dmitch@apple.com and dmitch@dmitch.com, in a standard Identity search of the 
current user's default keychain search list. You can specify different 
Identities (by email address) and/or a specific keychain with the -s, -S, 
and -k options.

Note: if you do specify alternate Identities, the identities you specify have
to resolve to a known root cert with a total cert chain length of 3 (one for the
leaf, one intermediate, one root).