This is possible on nightly now and the next 26.x release possibly tomorrow. Node.js loads OpenSSL STORE provider backed keys. In these examples a tiny KMS one i'm cooking up, in CI we're testing with pkcs11-provider.
The URL input being resolved with a STORE is what's new.