The crate applecodesign-rs uses (p12) seems to lack support for P12's with SHA256 hashing, causing it to not recognize the password when trying to codesign with it.