I just couldn’t let the issue with Rootcrit go, so I did some debugging via carton on Mojolicious::Static. I discovered that it was a misunderstanding on my part. The documentation could be a little clearer on this one. When I access “localhost/public/x” it then tries to look in “/home/user/whatever/public/public/x” or in other words, I needed to omit “/public” from my script link. So, I can now move ahead with openpgp.js.